Mirrors/openclaw
1
0
Fork 0
mirror of https://github.com/openclaw/openclaw.git synced 2026-04-18 23:33:24 +02:00
Code Issues Packages Projects Releases Wiki Activity

Feat/fix qq ssrf url list (#65788)

Browse Source 
* fix: update qqbot media host allowlist

* fix: update qqbot media host allowlist

* fix: update qqbot media host allowlist

* fix: update qqbot media host allowlist
This commit is contained in:
Sliverp
2026-04-13 15:49:32 +08:00
committed by GitHub
parent 0cfb83edfa
commit ddb7a8dd80
2 changed files with 20 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
extensions/qqbot/src/utils/file-utils.test.ts
View File

@@ -47,7 +47,16 @@ describe("qqbot file-utils downloadFile", () => {
ssrfPolicy: QQBOT_MEDIA_SSRF_POLICY,
});
expect(QQBOT_MEDIA_SSRF_POLICY).toEqual({
hostnameAllowlist: ["*.myqcloud.com", "*.qpic.cn", "*.qq.com", "*.tencentcos.com"],
hostnameAllowlist: [
"*.qpic.cn",
"*.qq.com",
"*.weiyun.com",
"*.qq.com.cn",
"*.ugcimg.cn",
"*.myqcloud.com",
"*.tencentcos.cn",
"*.tencentcos.com",
],
allowRfc2544BenchmarkRange: true,
});
});

11
extensions/qqbot/src/utils/file-utils.ts
View File

@@ -16,9 +16,18 @@ export const MAX_UPLOAD_SIZE = 20 * 1024 * 1024;
export const LARGE_FILE_THRESHOLD = 5 * 1024 * 1024;
const QQBOT_MEDIA_HOSTNAME_ALLOWLIST = [
"*.myqcloud.com",
// QQ富媒体
"*.qpic.cn",
"*.qq.com",
"*.weiyun.com",
"*.qq.com.cn",
// QQ机器人
"*.ugcimg.cn",
// 腾讯云COS
"*.myqcloud.com",
"*.tencentcos.cn",
"*.tencentcos.com",
];