{"record":{"id":"b51ae0b37a8f47ea","repo":"googleapis/mcp-toolbox","slug":"invalid-customblockedipranges-w","errorCode":null,"errorMessage":"invalid customBlockedIpRanges: %w","messagePattern":"invalid customBlockedIpRanges: %w","errorType":"validation","errorClass":null,"httpStatus":null,"severity":"error","filePath":"internal/sources/http/http.go","lineNumber":127,"sourceCode":"\t\t}\n\n\t\tlogger.WarnContext(ctx, \"WARNING: TLS certificate verification is skipped (InsecureSkipVerify: true) for HTTP source %s. This exposes all traffic for this source to Man-in-the-Middle (MITM) attacks. Do not use in production.\", r.Name)\n\t}\n\n\t// Validate BaseURL\n\tparsedURL, err := url.ParseRequestURI(r.BaseURL)\n\tif err != nil {\n\t\treturn nil, fmt.Errorf(\"failed to parse BaseUrl %v\", err)\n\t}\n\n\tallowedRanges, err := parseCIDRs(r.AllowedIPRanges)\n\tif err != nil {\n\t\treturn nil, fmt.Errorf(\"invalid allowedIpRanges: %w\", err)\n\t}\n\n\tcustomBlocked, err := parseCIDRs(r.CustomBlockedIPRanges)\n\tif err != nil {\n\t\treturn nil, fmt.Errorf(\"invalid customBlockedIpRanges: %w\", err)\n\t}\n\n\tguard := &SSRFGuard{\n\t\tAllowPrivateNetworks: r.AllowPrivateNetworks,\n\t\tAllowedRanges:        allowedRanges,\n\t\tCustomBlocked:        customBlocked,\n\t}\n\n\t// Quick fast-fail check for direct IP configurations in the YAML\n\tif ip := net.ParseIP(parsedURL.Hostname()); ip != nil {\n\t\tif guard.IsIPBlocked(ip) {\n\t\t\treturn nil, fmt.Errorf(\"invalid BaseURL %s: points to a blocked internal IP address\", r.BaseURL)\n\t\t}\n\t}\n\n\tclient, err := createHTTPClient(duration, tr, guard, nil)\n\tif err != nil {\n\t\treturn nil, fmt.Errorf(\"failed to create secure HTTP client: %w\", err)","sourceCodeStart":109,"sourceCodeEnd":145,"githubUrl":"https://github.com/googleapis/mcp-toolbox/blob/8cc6e09de2ad7b8bffc77751799585a1401a48eb/internal/sources/http/http.go#L109-L145","documentation":"Error \"invalid customBlockedIpRanges: %w\" thrown in googleapis/mcp-toolbox.","triggerScenarios":"Thrown at internal/sources/http/http.go:127 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":[],"exampleFix":null,"handlingStrategy":null,"validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"8cc6e09de2ad7b8bffc77751799585a1401a48eb","analyzedAt":"2026-09-05T01:10:36.887Z","contentChangedAt":"2026-09-05T01:10:36.887Z","schemaVersion":2},"datasetVersion":"2026-09-08T10:18:20.063Z"}