vultr/openclaw
1
0
Fork 0
mirror of https://github.com/openclaw/openclaw.git synced 2026-05-06 17:40:44 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(browser): preserve legacy strict SSRF alias

Browse Source
This commit is contained in:
Ayaan Zaidi
2026-04-14 12:50:02 +05:30
parent 024f4614a1
commit 213c36cf51
3 changed files with 13 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
extensions/browser/src/browser/config.test.ts
View File

@@ -321,6 +321,15 @@ describe("browser config", () => {
expect(resolved.ssrfPolicy).toEqual({ dangerouslyAllowPrivateNetwork: false });
});
it("preserves legacy explicit strict mode from allowPrivateNetwork=false", () => {
const resolved = resolveBrowserConfig({
ssrfPolicy: {
allowPrivateNetwork: false,
},
} as unknown as BrowserConfig);
expect(resolved.ssrfPolicy).toEqual({ dangerouslyAllowPrivateNetwork: false });
});
it("keeps allowlist-only browser SSRF policy strict by default", () => {
const resolved = resolveBrowserConfig({
ssrfPolicy: {

4
extensions/browser/src/browser/config.ts
View File

@@ -149,7 +149,9 @@ function resolveBrowserSsrFPolicy(cfg: BrowserConfig | undefined): SsrFPolicy |
}
return {
...(resolvedAllowPrivateNetwork || dangerouslyAllowPrivateNetwork === false
...(resolvedAllowPrivateNetwork ||
dangerouslyAllowPrivateNetwork === false ||
allowPrivateNetwork === false
? { dangerouslyAllowPrivateNetwork: resolvedAllowPrivateNetwork }
: {}),
...(allowedHostnames ? { allowedHostnames } : {}),