admin/DeskClaw
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: default browser ssrfPolicy to allow private network access (#860)

Browse Source
This commit is contained in:
paisley
2026-04-16 14:57:27 +08:00
committed by GitHub
Unverified
parent 1f39d1a8a7
commit 2fefbf3aba
1 changed files with 25 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

25
electron/utils/openclaw-auth.ts
View File

@@ -1188,6 +1188,18 @@ export async function syncBrowserConfigToOpenClaw(): Promise<void> {
changed = true; changed = true;
} }
// Default ssrfPolicy to allow private network access for enterprise/internal use
if (browser.ssrfPolicy == null) {
browser.ssrfPolicy = { dangerouslyAllowPrivateNetwork: true };
changed = true;
} else if (
typeof browser.ssrfPolicy === 'object' &&
(browser.ssrfPolicy as Record<string, unknown>).dangerouslyAllowPrivateNetwork === undefined
) {
(browser.ssrfPolicy as Record<string, unknown>).dangerouslyAllowPrivateNetwork = true;
changed = true;
}
if (!changed) return; if (!changed) return;
config.browser = browser; config.browser = browser;
@@ -1294,6 +1306,19 @@ export async function batchSyncConfigFields(token: string): Promise<void> {
config.browser = browser; config.browser = browser;
modified = true; modified = true;
} }
// Default ssrfPolicy to allow private network access for enterprise/internal use
if (browser.ssrfPolicy == null) {
browser.ssrfPolicy = { dangerouslyAllowPrivateNetwork: true };
config.browser = browser;
modified = true;
} else if (
typeof browser.ssrfPolicy === 'object' &&
(browser.ssrfPolicy as Record<string, unknown>).dangerouslyAllowPrivateNetwork === undefined
) {
(browser.ssrfPolicy as Record<string, unknown>).dangerouslyAllowPrivateNetwork = true;
config.browser = browser;
modified = true;
}
// ── Session idle minutes ── // ── Session idle minutes ──
const session = ( const session = (