apunkt/webclaw
1
0
Fork 0
mirror of https://github.com/0xMassi/webclaw.git synced 2026-06-22 02:38:06 +02:00
Code Issues Projects Releases Packages Wiki Activity

fix: validate self-host route URLs consistently

Browse source
This commit is contained in:
Valerio 2026-05-04 14:30:06 +02:00
parent eede2f6953
commit 1c9def2fde
8 changed files with 26 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

3
crates/webclaw-server/src/routes/diff.rs
View file

@ -75,8 +75,9 @@ pub async fn diff_route(
if req.url.trim().is_empty() {
return Err(ApiError::bad_request("`url` is required"));
}
let url = webclaw_fetch::url_security::validate_public_http_url(&req.url).await?;
let current = state.fetch().fetch_and_extract(&req.url).await?;
let current = state.fetch().fetch_and_extract(url.as_str()).await?;
let previous = req.previous.into_extraction();
let result = diff(&previous, &current);