fw-addr-lists: check last character of line for JSONHEADmain

This is not a proof, but a line also ending with a curly bracket
has higher probability of being valid JSON.

Better safe than sorry... We are suffering a CVE in RouterOS:
https://www.cve.org/CVERecord?id=CVE-2025-10948

1 files changed, 1 insertions, 1 deletions

diff --git a/fw-addr-lists.rsc b/fw-addr-lists.rsc
index 0c45f7e..d56d40f 100644
--- a/fw-addr-lists.rsc
+++ b/fw-addr-lists.rsc
@@ -103,7 +103,7 @@
       :foreach Line in=[ :deserialize $Data delimiter="\n" from=dsv options=dsv.plain ] do={
         :set Line ($Line->0);
         :local Address;
-        :if ([ :pick $Line 0 1 ] = "{") do={
+        :if ([ :pick $Line 0 1 ] = "{" && [ :pick $Line ([ :len $Line ] - 1) ] = "}") do={
           :do {
             :set Address [ :tostr ([ :deserialize from=json $Line ]->"cidr") ];
           } on-error={ }