From b8917c62fb5d5b4f54ad7366243861c4b9d98cec Mon Sep 17 00:00:00 2001 From: xiaoxia Date: Wed, 29 Jul 2026 01:08:33 +0800 Subject: [PATCH] =?UTF-8?q?fix(url=5Fsecurity):=20=E8=A1=A5=E5=85=A8?= =?UTF-8?q?=E7=BC=BA=E5=A4=B1=E7=9A=84=E5=AF=BC=E5=87=BA=E5=8F=98=E9=87=8F?= =?UTF-8?q?=E5=92=8C=E7=A7=81=E6=9C=89=E5=88=AB=E5=90=8D?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- packages/shared/url_security.py | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/packages/shared/url_security.py b/packages/shared/url_security.py index 5f08318ed..f7a9b5e6f 100755 --- a/packages/shared/url_security.py +++ b/packages/shared/url_security.py @@ -46,8 +46,15 @@ logger = logging.getLogger(__name__) # ── 兼容导出（保持原有变量名供外部引用） ────────────────────────────────── ALLOWED_SCHEMES = set(_allowed_schemes_base) ALLOWED_PORTS = set(_allowed_ports_base) +ALLOWED_AUDIO_MIME_TYPES = set(_allowed_audio_base) +ALLOWED_IMAGE_MIME_TYPES = set(_allowed_image_base) +MAX_URL_LENGTH = _max_url_length_base UrlSecurityError = _UrlSecurityError_base +# 私有别名（供测试和内部引用） +_check_internal_hostnames = _check_internal_hostname_base +_check_ssrf_ip = _check_ssrf_ip_base + # 可信域名白名单（从环境变量读取） TRUSTED_DOMAINS: set[str] = set() _env_trusted = os.environ.get("URL_SECURITY_TRUSTED_DOMAINS", "")