zlei6/ragflow
1
0
Fork 0
mirror of https://github.com/infiniflow/ragflow.git synced 2026-08-11 09:51:44 +08:00
Code Issues Packages Projects Releases Wiki Activity

Go: fix SSRF (#17641)

Browse Source 
### Summary

Check the URL to prevent SSRF attack.

---------

Signed-off-by: Jin Hai <haijin.chn@gmail.com>
This commit is contained in:
Jin Hai
2026-07-31 19:15:38 +08:00
committed by GitHub
parent f03a00c54c
commit b058229ab3
146 changed files with 833 additions and 74 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
internal/parser/parser/pdf_parser_somark_test.go
View File

@@ -10,6 +10,7 @@ import (
)
func TestPDFParser_ParseWithResult_SoMarkJSONIntegration(t *testing.T) {
withSSRFBypass(t)
var submitSeen bool
var pollSeen bool
server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
@@ -78,6 +79,7 @@ func TestPDFParser_ParseWithResult_SoMarkJSONIntegration(t *testing.T) {
}
func TestPDFParser_ParseWithResult_SoMarkMarkdownIntegration(t *testing.T) {
withSSRFBypass(t)
server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
switch r.URL.Path {
case "/parse/async":
@@ -123,6 +125,7 @@ func TestSoMarkBlockToItem_DropsHeaderByDefault(t *testing.T) {
}
func TestSoMarkSubmitMultipartShape(t *testing.T) {
withSSRFBypass(t)
var form multipart.Form
server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
_ = r.ParseMultipartForm(1 << 20)