opensource
/
dify
mirror of https://github.com/langgenius/dify.git
2
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

fix: correct header assignment in SSRF proxy request handling

This commit is contained in:
yyh 2025-12-27 14:00:09 +08:00 committed by crazywoola
parent 8294759200
commit a4efb3acbf
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
api/core/helper/ssrf_proxy.py
View File

@ -123,8 +123,9 @@ def make_request(method, url, max_retries=SSRF_DEFAULT_MAX_RETRIES, **kwargs):
# the request API to explicitly set headers before sending # the request API to explicitly set headers before sending
headers = {k: v for k, v in headers.items() if k.lower() != "host"} headers = {k: v for k, v in headers.items() if k.lower() != "host"}
if user_provided_host is not None: if user_provided_host is not None:
request.headers["Host"] = user_provided_host headers["Host"] = user_provided_host
request = client.build_request(method, url, headers=headers, **kwargs)
response = client.send(request, follow_redirects=follow_redirects) response = client.send(request, follow_redirects=follow_redirects)
# Check for SSRF protection by Squid proxy # Check for SSRF protection by Squid proxy