prevent SSRF in http(s) request
npm install ssrf-agent --save
const ssrfAgent = require('ssrf-agent');
const request = require('request');
// with request module
const url = 'http://www.welefen.com'
request(url, {
agent: ssrfAgent(url)
}, (err, response, body) => {
})
const ssrfAgent = require('ssrf-agent');
const fetch = require('node-fetch');
// with node-fetch module
const url = 'http://www.welefen.com'
fetch(url, {
agent: ssrfAgent(url)
}).then(res => res.text).then(data => {
}).catch(err => {
})
const getAgent = require('ssrf-agent');
const agent = getAgent(ipChecker, agent);
ipChecker(ip)
{Function} check ip is allowed, default isrequire('ip').isPrivate
agent
{String | Object} default ishttp
, supporthttp
https
oragent instance