github/openclaw
1
0
Fork 0
mirror of https://github.com/openclaw/openclaw.git synced 2026-05-08 19:28:28 +00:00
Code Issues Packages Projects Releases Wiki Activity

chore(security): soften gatewayUrl override messaging

Browse Source
This commit is contained in:
Peter Steinberger
2026-02-14 21:39:39 +01:00
parent 2d5647a804
commit e95ce05c1e
3 changed files with 6 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
src/agents/tools/gateway.ts
View File

@@ -67,9 +67,9 @@ function validateGatewayUrlOverrideForAgentTools(urlOverride: string): string {
if (!allowed.has(parsed.key)) {
throw new Error(
[
"gatewayUrl override blocked (SSRF hardening).",
"gatewayUrl override rejected.",
`Allowed: ws(s) loopback on port ${port} (127.0.0.1/localhost/[::1])`,
"Or: configure gateway.remote.url and omit gatewayUrl.",
"Or: configure gateway.remote.url and omit gatewayUrl to use the configured remote gateway.",
].join(" "),
);
}