mirror of
https://github.com/baptisteArno/typebot.io.git
synced 2026-06-05 21:04:43 +08:00
b25c41b02b
- Add `createSafeDispatcher` with a `validatingLookup` that checks resolved IPs at TCP connection time, preventing DNS rebinding TOCTOU attacks (GHSA-hgqq-whf5-mrrf) - Pass the safe undici dispatcher in `safeFetchWithoutChunkedEncoding` (`ky.ts`) and in the isolated VM fetch wrapper (`executeFunction.ts`) - Export `parseIPAddress`, `validateIPAddress` and `ParsedIP` from `validateHttpReqUrl.ts` for reuse in the dispatcher - Add unit tests for `validatingLookup` and E2E test bot/spec for SSRF scenarios - Add `@types/bun` to `packages/lib` tsconfig --------- Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| auto-approve.yml | ||
| auto-create-tags.yml | ||
| daily.yml | ||
| deploy-partykit.yml | ||
| deploy-workflows.yml | ||
| hourly.yml | ||
| monthly.yml | ||
| publish-typebot-js.yml | ||
| publish-typebot-react.yml | ||
| release.yml | ||
| stale.yml | ||
| typecheck.yml | ||