TestIPValidation Class — langchain Architecture

Source Code

libs/core/tests/unit_tests/test_ssrf_protection.py lines 19–82

class TestIPValidation:
    """Tests for IP address validation functions."""

    def test_is_private_ip_ipv4(self) -> None:
        """Test private IPv4 address detection."""
        assert is_private_ip("10.0.0.1") is True
        assert is_private_ip("172.16.0.1") is True
        assert is_private_ip("192.168.1.1") is True
        assert is_private_ip("127.0.0.1") is True
        assert is_private_ip("169.254.169.254") is True
        assert is_private_ip("0.0.0.1") is True

    def test_is_private_ip_ipv6(self) -> None:
        """Test private IPv6 address detection."""
        assert is_private_ip("::1") is True  # Loopback
        assert is_private_ip("fc00::1") is True  # Unique local
        assert is_private_ip("fe80::1") is True  # Link-local
        assert is_private_ip("ff00::1") is True  # Multicast

    def test_is_private_ip_public(self) -> None:
        """Test that public IPs are not flagged as private."""
        assert is_private_ip("8.8.8.8") is False
        assert is_private_ip("1.1.1.1") is False
        assert is_private_ip("151.101.1.140") is False

    def test_is_private_ip_invalid(self) -> None:
        """Test handling of invalid IP addresses."""
        assert is_private_ip("not-an-ip") is False
        assert is_private_ip("999.999.999.999") is False

    def test_is_cloud_metadata_ips(self) -> None:
        """Test cloud metadata IP detection."""
        assert is_cloud_metadata("example.com", "169.254.169.254") is True
        assert is_cloud_metadata("example.com", "169.254.170.2") is True
        assert is_cloud_metadata("example.com", "100.100.100.200") is True

    def test_is_cloud_metadata_hostnames(self) -> None:
        """Test cloud metadata hostname detection."""
        assert is_cloud_metadata("metadata.google.internal") is True
        assert is_cloud_metadata("metadata") is True
        assert is_cloud_metadata("instance-data") is True
        assert is_cloud_metadata("METADATA.GOOGLE.INTERNAL") is True  # Case insensitive

    def test_is_cloud_metadata_safe(self) -> None:
        """Test that normal URLs are not flagged as cloud metadata."""
        assert is_cloud_metadata("example.com", "8.8.8.8") is False
        assert is_cloud_metadata("google.com") is False

    def test_is_localhost_hostnames(self) -> None:
        """Test localhost hostname detection."""
        assert is_localhost("localhost") is True
        assert is_localhost("LOCALHOST") is True
        assert is_localhost("localhost.localdomain") is True

    def test_is_localhost_ips(self) -> None:
        """Test localhost IP detection."""
        assert is_localhost("example.com", "127.0.0.1") is True
        assert is_localhost("example.com", "::1") is True
        assert is_localhost("example.com", "0.0.0.0") is True

    def test_is_localhost_safe(self) -> None:
        """Test that normal hosts are not flagged as localhost."""
        assert is_localhost("example.com", "8.8.8.8") is False
        assert is_localhost("google.com") is False