github/openclaw
1
0
Fork 0
mirror of https://github.com/openclaw/openclaw.git synced 2026-05-03 21:54:38 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(security): harden browser SSRF defaults and migrate legacy key

Browse Source
This commit is contained in:
Peter Steinberger
2026-02-24 01:51:44 +00:00
parent 8779b523dc
commit 5eb72ab769
24 changed files with 334 additions and 20 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
src/config/types.browser.ts
View File

@@ -13,8 +13,10 @@ export type BrowserSnapshotDefaults = {
mode?: "efficient";
};
export type BrowserSsrFPolicyConfig = {
/** If true, permit browser navigation to private/internal networks. Default: false */
/** Legacy alias for private-network access. Prefer dangerouslyAllowPrivateNetwork. */
allowPrivateNetwork?: boolean;
/** If true, permit browser navigation to private/internal networks. Default: true */
dangerouslyAllowPrivateNetwork?: boolean;
/**
* Explicitly allowed hostnames (exact-match), including blocked names like localhost.
* Example: ["localhost", "metadata.internal"]