apunkt/webclaw
1
0
Fork 0
mirror of https://github.com/0xMassi/webclaw.git synced 2026-06-06 22:05:13 +02:00
Code Issues Projects Releases Packages Wiki Activity

fix: validate self-host route URLs consistently

Browse source
This commit is contained in:
Valerio 2026-05-04 14:30:06 +02:00
parent eede2f6953
commit 1c9def2fde
8 changed files with 26 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

3
crates/webclaw-server/src/routes/map.rs
View file

@ -27,8 +27,9 @@ pub async fn map(
if req.url.trim().is_empty() {
return Err(ApiError::bad_request("`url` is required"));
}
let url = webclaw_fetch::url_security::validate_public_http_url(&req.url).await?;
let entries = sitemap::discover(state.fetch(), &req.url).await?;
let entries = sitemap::discover(state.fetch(), url.as_str()).await?;
let body = if req.include_metadata {
json!({