feat(security): add darklist.de source and raise the blocklist cap to 1M

This commit is contained in:
openhands
2026-09-24 23:22:27 +02:00
parent 7f6febf906
commit 8486ac4053
3 changed files with 5 additions and 3 deletions
+2 -2
View File
@@ -848,8 +848,8 @@ bash cms security blocklists
Defaults: Spamhaus DROP/EDROP, DShield, CINS, Greensnow, StopForumSpam,
Binary Defense, blocklist.de, Emerging Threats, BruteForceBlocker, abuse.ch
Feodo/SSLBL, Botvrij, IPsum, Firehol ipsets and Tor exit nodes
(25 sources). URLhaus was removed because its `text_online` feed lists URLs,
Feodo/SSLBL, Darklist, Botvrij, IPsum, Firehol ipsets and Tor exit nodes
(26 sources). URLhaus was removed because its `text_online` feed lists URLs,
not IPs; a malformed token in it could otherwise expand into a bogus
huge CIDR. The validator only accepts whole-line bare IPs or proper CIDRs,
enforces sane prefix bounds and drops reserved/private/loopback space, so a