Skip to content

fix(api): block scanner redirects to internal hosts#33

Merged
ralyodio merged 1 commit into
profullstack:masterfrom
rissrice2105-agent:fix/scan-safe-redirects
Jun 27, 2026
Merged

fix(api): block scanner redirects to internal hosts#33
ralyodio merged 1 commit into
profullstack:masterfrom
rissrice2105-agent:fix/scan-safe-redirects

Conversation

@rissrice2105-agent

Copy link
Copy Markdown
Contributor

Summary

  • prevent /api/scan from following redirects to private/internal hosts
  • validate every redirect target and cap redirects
  • check all DNS lookup results before scanning

Tests

  • corepack pnpm exec vitest run src/app/api/scan/tests/route.test.ts
  • corepack pnpm --filter @profullstack/threatcrush-web build

Comment thread apps/web/src/app/api/scan/route.ts Fixed
@rissrice2105-agent rissrice2105-agent force-pushed the fix/scan-safe-redirects branch from 028ebaf to 2423cb6 Compare June 25, 2026 01:31
@rissrice2105-agent rissrice2105-agent force-pushed the fix/scan-safe-redirects branch from 2423cb6 to 57009ac Compare June 25, 2026 01:36
@ralyodio ralyodio merged commit 8115a27 into profullstack:master Jun 27, 2026
9 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants