typebot.io/packages/lib
Baptiste Arnaud 892870ff86
🐛 Fix SSRF safe dispatcher DNS lookup handling (#2462)
- Fix `validatingLookup` to handle `{ all: true }` DNS lookup mode that
undici passes, which returns an array of addresses instead of a single
string
- Add localhost bypass in development mode to match existing
`validateHttpReqUrl` behavior
- Without this fix, `fetch()` in Set Variable code blocks silently
failed for external URLs

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-15 12:05:54 +02:00
..
src 🐛 Fix SSRF safe dispatcher DNS lookup handling (#2462) 2026-04-15 12:05:54 +02:00
package.json 🔧 Upgrade Effect packages 2026-03-24 14:51:38 +01:00
tsconfig.json ♻️ Migrate to NX (#2418) 2026-03-18 15:29:32 +00:00
tsconfig.lib.json 🐛 Fix SSRF bypass via DNS rebinding in HTTP request and script fetch flows (#2461) 2026-04-15 09:28:06 +00:00