diff --git a/packages/shared/url_security.py b/packages/shared/url_security.py index 5f08318ed..f7a9b5e6f 100755 --- a/packages/shared/url_security.py +++ b/packages/shared/url_security.py @@ -46,8 +46,15 @@ logger = logging.getLogger(__name__) # ── 兼容导出(保持原有变量名供外部引用) ────────────────────────────────── ALLOWED_SCHEMES = set(_allowed_schemes_base) ALLOWED_PORTS = set(_allowed_ports_base) +ALLOWED_AUDIO_MIME_TYPES = set(_allowed_audio_base) +ALLOWED_IMAGE_MIME_TYPES = set(_allowed_image_base) +MAX_URL_LENGTH = _max_url_length_base UrlSecurityError = _UrlSecurityError_base +# 私有别名(供测试和内部引用) +_check_internal_hostnames = _check_internal_hostname_base +_check_ssrf_ip = _check_ssrf_ip_base + # 可信域名白名单(从环境变量读取) TRUSTED_DOMAINS: set[str] = set() _env_trusted = os.environ.get("URL_SECURITY_TRUSTED_DOMAINS", "")