feat(config): support ssrf field in security config. (#4778)

* feat(config): support ssrf field in security * test(core): add config.security.ssrf test case.
eggjs · Oct 18, 2021 · debfda7 · debfda7
1 parent 6258f65
commit debfda7
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 0 deletions.
diff --git a/index.d.ts b/index.d.ts
@@ -466,6 +466,10 @@ declare module 'egg' {
       protocolWhiteList: string[];
       defaultMiddleware: string;
       csrf: any;
+      ssrf: {
+        ipBlackList: string[];
+        checkAddress?(ip: string): boolean;
+      };
       xframe: {
         enable: boolean;
         value: 'SAMEORIGIN' | 'DENY' | 'ALLOW-FROM';

diff --git a/test/fixtures/apps/app-ts-type-check/normal.ts b/test/fixtures/apps/app-ts-type-check/normal.ts
@@ -184,6 +184,14 @@ config2.customLoader = {
 }
 config2.security = {
   csrf: false,
+  ssrf: {
+    ipBlackList: [
+      '10.0.0.0/8',
+    ],
+    checkAddress (ip) {
+      return ip === '127.0.0.1';
+    }
+  },
 }
 config2.logger = {
   dir: 'logs',