I guess what I need to do is completely filter out anything that is local. Super weird issue and frankly annoying that they can even be posted to Lemmy.
To test this, visit my profile and hit "Posts". I posted something in /c/test with an internal IP for reference.
Edit: We'll add some information to the dialog asking you to deny the permission and I'll do my best to filter these out so it doesn't pop up at all.
Edit: Fixed this now. See these commits for changes:
You could test it now, though you might have to actually re-install to get the message again. You could also use another app to test it and should get it. Visit my profile and hit Posts. There's a test link there that will show off the issue.