Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Prevent undici SSRF attacks with redirects (2) #338

Draft
wants to merge 10 commits into
base: patch-ssrf-enable
Choose a base branch
from
Draft

Prevent undici SSRF attacks with redirects (2) #338

wants to merge 10 commits into from

Conversation

timokoessler
Copy link
Member

@timokoessler timokoessler commented Aug 22, 2024 •
edited
Loading

No description provided.

@codecov Codecov
Copy link

codecov bot commented Aug 22, 2024 •
edited
Loading

Codecov Report

Attention: Patch coverage is 46.96356% with 131 lines in your changes missing coverage. Please review.

Files with missing lines Patch % Lines
library/sinks/undici/wrapDispatch.ts 6.66% 42 Missing ⚠️
library/sinks/undici/onHeaders.ts 20.40% 39 Missing ⚠️
library/sinks/Undici.ts 30.00% 21 Missing ⚠️
library/sinks/undici/RequestContextStorage.ts 57.50% 17 Missing ⚠️
...brary/vulnerabilities/ssrf/addRedirectToContext.ts 87.03% 6 Missing and 1 partial ⚠️
...rary/vulnerabilities/ssrf/inspectDNSLookupCalls.ts 66.66% 2 Missing and 1 partial ⚠️
library/sinks/Fetch.ts 0.00% 2 Missing ⚠️

📢 Thoughts on this report? Let us know!

Base automatically changed from new-hooks-system to beta October 14, 2024 16:56
Base automatically changed from beta to main December 3, 2024 15:56
@timokoessler timokoessler changed the base branch from main to patch-ssrf-enable January 6, 2025 15:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
feat
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@timokoessler @bitterpanda63