feat(security): add darklist.de source and raise the blocklist cap to 1M

This commit is contained in:
openhands committed 2026-09-24 23:22:27 +02:00
1 parent 7f6febf906
commit 8486ac4053
3 files changed
+5 -3

No files matched your search

+2 -2
View File
@@ -848,8 +848,8 @@ bash cms security blocklists
Defaults: Spamhaus DROP/EDROP, DShield, CINS, Greensnow, StopForumSpam,
Binary Defense, blocklist.de, Emerging Threats, BruteForceBlocker, abuse.ch
Feodo/SSLBL, Botvrij, IPsum, Firehol ipsets and Tor exit nodes
(25 sources). URLhaus was removed because its `text_online` feed lists URLs,
Feodo/SSLBL, Darklist, Botvrij, IPsum, Firehol ipsets and Tor exit nodes
(26 sources). URLhaus was removed because its `text_online` feed lists URLs,
not IPs; a malformed token in it could otherwise expand into a bogus
huge CIDR. The validator only accepts whole-line bare IPs or proper CIDRs,
enforces sane prefix bounds and drops reserved/private/loopback space, so a