feat: mvp

[antongolub]

Fixes parsers issues

• ipPublic()/isPrivate()CVE-2023-42282 CVE-2024-29415
  • Security Advisory: NPM ip package still incorrectly identifies some private IP addresses as public indutny/node-ip#150
  • HIGH SEVERITY VULNERABILITY ISSUE indutny/node-ip#153
  • CVE-2024-29415 indutny/node-ip#158
  • CVE-2024-29415 - Added test cases for fixed related to "isPublic() function still identifying some private IP addresses as public" indutny/node-ip#157
  • Additional SSRF Bypass: Octal Format ("017700000001") indutny/node-ip#162

  const cases = [
      // CVE-2023-42282
      ['0x7f.1', true],

      // CVE-2024-29415
      ['127.1', true],
      ['2130706433', true],
      ['01200034567', false],
      ['012.1.2.3', false],
      ['000:0:0000::01', true],
      ['::fFFf:127.0.0.1', true],
      ['::fFFf:127.255.255.256', true]
    ]

    for (const [input, expected] of cases) {
      assert.equal(isPrivate(input), !!expected, `isPrivate(${input}) === ${!!expected}`)
      assert.equal(isPublic(input), !expected, `isPublic(${input}) === ${!expected}`)
    }

• isV4Format()
  • ip.isV4Format('999.999.999.999') returns true indutny/node-ip#159

ip.isV4Format('255.255.255.256')   // true
ip.isV4('255.255.255.256')         // false

Extends test matrix

• Add testing against node 20 indutny/node-ip#155