vultr/openclaw
1
0
Fork 0
mirror of https://github.com/openclaw/openclaw.git synced 2026-05-06 07:00:43 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(browser): preserve explicit strict SSRF config

Browse Source
This commit is contained in:
Ayaan Zaidi
2026-04-14 12:22:14 +05:30
parent 1b76966f05
commit 1dabfef28d
2 changed files with 4 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
extensions/browser/src/browser/config.test.ts
View File

@@ -318,7 +318,7 @@ describe("browser config", () => {
dangerouslyAllowPrivateNetwork: false,
},
});
expect(resolved.ssrfPolicy).toEqual({});
expect(resolved.ssrfPolicy).toEqual({ dangerouslyAllowPrivateNetwork: false });
});
it("keeps allowlist-only browser SSRF policy strict by default", () => {

4
extensions/browser/src/browser/config.ts
View File

@@ -149,7 +149,9 @@ function resolveBrowserSsrFPolicy(cfg: BrowserConfig | undefined): SsrFPolicy |
}
return {
...(resolvedAllowPrivateNetwork ? { dangerouslyAllowPrivateNetwork: true } : {}),
...(resolvedAllowPrivateNetwork || dangerouslyAllowPrivateNetwork === false
? { dangerouslyAllowPrivateNetwork: resolvedAllowPrivateNetwork }
: {}),
...(allowedHostnames ? { allowedHostnames } : {}),
...(hostnameAllowlist ? { hostnameAllowlist } : {}),
};