mirror of
https://github.com/baptisteArno/typebot.io.git
synced 2026-06-05 21:04:43 +08:00
b25c41b02b
- Add `createSafeDispatcher` with a `validatingLookup` that checks resolved IPs at TCP connection time, preventing DNS rebinding TOCTOU attacks (GHSA-hgqq-whf5-mrrf) - Pass the safe undici dispatcher in `safeFetchWithoutChunkedEncoding` (`ky.ts`) and in the isolated VM fetch wrapper (`executeFunction.ts`) - Export `parseIPAddress`, `validateIPAddress` and `ParsedIP` from `validateHttpReqUrl.ts` for reuse in the dispatcher - Add unit tests for `validatingLookup` and E2E test bot/spec for SSRF scenarios - Add `@types/bun` to `packages/lib` tsconfig --------- Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
20 lines
394 B
JSON
20 lines
394 B
JSON
{
|
|
"extends": "../../tsconfig.base.json",
|
|
"compilerOptions": {
|
|
"rootDir": "src",
|
|
"outDir": "dist",
|
|
"tsBuildInfoFile": "dist/tsconfig.lib.tsbuildinfo",
|
|
"lib": ["dom", "ESNext"],
|
|
"types": ["@types/bun"]
|
|
},
|
|
"include": ["src/**/*.ts"],
|
|
"references": [
|
|
{
|
|
"path": "../schemas/tsconfig.lib.json"
|
|
},
|
|
{
|
|
"path": "../env/tsconfig.lib.json"
|
|
}
|
|
]
|
|
}
|