fix: Optimize IP detection logic and add error handling

- #4038
- Check existence of clientIp and ignoreIps in advance
- Add error handling for CIDR parsing

src/lib/detect.ts

@@ -140,13 +140,12 @@ export async function getClientInfo(request: Request, payload: Record<string, an
 export function hasBlockedIp(clientIp: string) {
   const ignoreIps = process.env.IGNORE_IP;
 
-  if (ignoreIps) {
+  if (!clientIp || !ignoreIps) {
-    const ips = [];
+    return false;
-
-    if (ignoreIps) {
-      ips.push(...ignoreIps.split(',').map(n => n.trim()));
   }
 
+  const ips = ignoreIps.split(',').map(n => n.trim());
+
   return ips.find(ip => {
     if (ip === clientIp) {
       return true;
@@ -154,17 +153,18 @@ export function hasBlockedIp(clientIp: string) {
 
     // CIDR notation
     if (ip.indexOf('/') > 0) {
+      try {
         const addr = ipaddr.parse(clientIp);
         const range = ipaddr.parseCIDR(ip);
 
         if (addr.kind() === range[0].kind() && addr.match(range)) {
           return true;
         }
+      } catch {
+        // Ignore parsing errors
+      }
     }
 
     return false;
   });
-  }
-
-  return false;
 }