-
Notifications
You must be signed in to change notification settings - Fork 124
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Ssrf #279
Conversation
ca4b308
to
f5e86e0
Compare
lib/urllib.js
Outdated
return done(err); | ||
} | ||
function handleRequestEvents(req) { | ||
if (timing) { |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
这里的逻辑没有改,只是放到这个方法中了
0.10 的测试去掉了,muk 都用不了... |
lib/urllib.js
Outdated
@@ -243,6 +246,23 @@ exports.requestWithCallback = function requestWithCallback(url, args, callback) | |||
agent = proxyTunnelAgent; | |||
} | |||
|
|||
var _lookup = args.lookup || dns.lookup; |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
没有设置 args.checkAddress 的时候,能否不要去默认设置 lookup 为 dns.lookup?
lib/urllib.js
Outdated
try { | ||
req = httplib.request(options, onResponse); | ||
req.requestId = reqId; | ||
handleRequestEvents(req); |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
放到 try catch 外面
改掉了,再看看 |
No description provided.