pgondhi987 462b4020bc fix(browser): block SSRF redirect bypass via real-time route interception (#58771) ...

Install a Playwright route handler before `page.goto()` so navigations
to private/internal IPs are intercepted and aborted mid-redirect instead
of being checked post-hoc after the request already reached the internal
host. Blocked targets are permanently marked and rejected for subsequent
tool calls.

Thanks @pgondhi987

2026-04-02 09:07:57 -07:00

0 lines

0 B

Plaintext

Raw Blame History

The file is empty.