My SSRF Guard Blocked Itself: When the Address You Check Is Not the One You Connect To
Adding web search to a local model meant writing a textbook egress guard. Search then returned empty results, reliably — the guard was refusing Wikipedia and the search API, and its judgement was entirely correct. The cause was synthetic addresses from a transparent proxy landing in an RFC 2544 reserved range. That check-versus-use gap turned up three times in one file.
