mirror/nanobot
1
0
Fork 0
mirror of https://github.com/HKUDS/nanobot.git synced 2026-08-14 16:19:17 +03:00
Code Issues Packages Projects Releases Wiki Activity

fix(web): keep credential-bearing URLs away from the remote Jina reader

Browse Source
This commit is contained in:
shixi-li
2026-08-13 02:26:22 +09:00
committed by Xubin Ren
parent 498070d036
commit 31a71d6cd5
4 changed files with 235 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/guides/configure-web-search.md
+4
View File
@@ -81,6 +81,10 @@ in the WebUI or logs.
- Web fetch and HTTP MCP share an SSRF guard.
- Private, loopback, link-local, and cloud metadata addresses are blocked by
default.
- With `useJinaReader` enabled (the default), fetched URLs are disclosed to the
remote reader service. Credential-bearing URLs (userinfo or token/signature
query parameters) are fetched locally instead; path-embedded secrets cannot
be detected, so disable the remote reader when URLs must stay local.
- Add `tools.ssrfWhitelist` only for narrow trusted CIDRs.
- Do not give public chat users unrestricted web and shell access without
review.