github/openclaw
1
0
Fork 0
mirror of https://github.com/openclaw/openclaw.git synced 2026-05-16 20:07:55 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(mattermost): ignore wildcard bind hosts for slash callback URLs

Browse Source
This commit is contained in:
Echo
2026-02-15 11:16:31 -05:00
committed by Muhammed Mukhthar CM
parent 8c64b726fd
commit b0d703158f
1 changed files with 16 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
extensions/mattermost/src/mattermost/slash-commands.ts
View File

@@ -507,7 +507,22 @@ export function resolveCallbackUrl(params: {
if (params.config.callbackUrl) {
return params.config.callbackUrl;
}
let host = params.gatewayHost || "localhost";
const isWildcardBindHost = (rawHost: string): boolean => {
const trimmed = rawHost.trim();
if (!trimmed) return false;
const host = trimmed.startsWith("[") && trimmed.endsWith("]") ? trimmed.slice(1, -1) : trimmed;
// NOTE: Wildcard listen hosts are valid bind addresses but are not routable callback
// destinations. Don't emit callback URLs like http://0.0.0.0:3015/... or http://[::]:3015/...
// when an operator sets gateway.customBindHost.
return host === "0.0.0.0" || host === "::" || host === "0:0:0:0:0:0:0:0" || host === "::0";
};
let host =
params.gatewayHost && !isWildcardBindHost(params.gatewayHost)
? params.gatewayHost
: "localhost";
const path = normalizeCallbackPath(params.config.callbackPath);
// Bracket IPv6 literals so the URL is valid: http://[::1]:3015/...