fix(browser): unify SSRF guard path for navigation

2026-05-10 04:42:44 +00:00 · 2026-02-19 13:43:48 +01:00
parent 3c419b7bd3
commit 6195660b1a
15 changed files with 269 additions and 18 deletions
--- a/src/config/zod-schema.ts
+++ b/src/config/zod-schema.ts
@@ -221,6 +221,14 @@ export const OpenClawSchema = z
        attachOnly: z.boolean().optional(),
        defaultProfile: z.string().optional(),
        snapshotDefaults: BrowserSnapshotDefaultsSchema,
+        ssrfPolicy: z
+          .object({
+            allowPrivateNetwork: z.boolean().optional(),
+            allowedHostnames: z.array(z.string()).optional(),
+            hostnameAllowlist: z.array(z.string()).optional(),
+          })
+          .strict()
+          .optional(),
        profiles: z
          .record(
            z