换成单集群模式

EdgeDNS/internal/nodes/server.go

@@ -247,6 +247,15 @@ func (this *Server) parseAction(questionName string, remoteAddr *string) (string
 						return "", errors.New("decode question option failed: " + err.Error())
 					} else {
 						var ip = m.GetString("ip")
+						// 验证 IP 地址合法性，防止 IP 欺骗
+						parsedIP := net.ParseIP(ip)
+						if parsedIP == nil {
+							return "", errors.New("invalid IP address in setRemoteAddr: " + ip)
+						}
+						// 拒绝回环地址和未指定地址
+						if parsedIP.IsLoopback() || parsedIP.IsUnspecified() {
+							return "", errors.New("disallowed IP address in setRemoteAddr: " + ip)
+						}
 						*remoteAddr = ip
 					}
 				}