Security Best Practices changeddocs/2025-03-26/tutorials/security/security_best_practices

Upstream edited this page at 28 Jul 2026 15:42 UTC, give or take a minute or two: the time comes from Anthropic’s own sitemap rather than from a commit. This site recorded the change at 20 Oct 2026 20:07 UTC.

Upstream edited 28 Jul 2026 15:42 UTC

Recorded here 20 Oct 2026 20:07 UTC

Lines+4added

Lines−4removed

From line 423 where the diff opens

First seen 26 Aug 2026 this site's first read of the page

Recorded edits2to this page, all time

The whole hunk

from line 423, old and new numbered

lines

from line 423

423423* Link-local: `169.254.0.0/16` (including cloud metadata endpoints)

424424* Private IPv6 ranges: `fc00::/7`, `fe80::/10`

425425

426<Note>

427 Avoid implementing IP validation manually. Attackers exploit encoding tricks

428 (octal, hex, IPv4-mapped IPv6) that custom parsers often miss.

429</Note>

426> [!NOTE]

427>

428> Avoid implementing IP validation manually. Attackers exploit encoding tricks

429> (octal, hex, IPv4-mapped IPv6) that custom parsers often miss.

430430

431431**Validate Redirect Targets**

432432