Merge pull request #3 from ericksc/feature/hu-04-require-prefix-length-strict-cidr

HU-04: Require numeric prefix in strict CIDR mode

Author: ericksc

.github/workflows/pycqa.yaml

@@ -3,9 +3,9 @@ name: pycqa
 on:
   workflow_dispatch:
   push:
-    branches: [master]
+    branches: [master, release]
   pull_request:
-    branches: [master]
+    branches: [master, release]
 jobs:
   tooling:
     runs-on: ubuntu-latest

.github/workflows/sast.yaml

@@ -4,9 +4,9 @@ name: sast
 on:
   workflow_dispatch:
   push:
-    branches: ["master"]
+    branches: ["master", "release"]
   pull_request:
-    branches: ["master"]
+    branches: ["master", "release"]
 
 jobs:
   sast:

src/validators/ip_address.py

@@ -1,5 +1,6 @@
 """IP Address."""
 
+# cosmetic: no functional change (CI trigger demo)
 # standard
 from ipaddress import (
     AddressValueError,
@@ -88,6 +89,10 @@ def ipv4(
         if cidr:
             if strict and value.count("/") != 1:
                 raise ValueError("IPv4 address was expected in CIDR notation")
+            if strict:
+                _, prefix = value.split("/")
+                if not prefix.isdigit() or not (0 <= int(prefix) <= 32):
+                    raise ValueError("CIDR prefix must be a number between 0 and 32")
             return IPv4Network(value, strict=not host_bit) and _check_private_ip(value, private)
         return IPv4Address(value) and _check_private_ip(value, private)
     except (ValueError, AddressValueError, NetmaskValueError):