@abtnode/util 1.17.3-beta-20251126-121502-d0926972 → 1.17.3-beta-20251128-095123-a76cb6bc

package/lib/ssrf-protector.js

@@ -4,6 +4,7 @@
 const isPrivateIP = require('private-ip');
 const isIP = require('is-ip');
 const dns = require('dns');
+const { isDidDomainUrl } = require('./url-evaluation');
 
 // 允许的协议， 只允许 https
 function isAllowedProtocol(protocol) {
@@ -88,6 +89,11 @@ async function isAllowedURL(url) {
       return !isPrivateIP(hostname);
     }
 
+    // 如果域名在跳过列表中，则直接返回true
+    if (isDidDomainUrl(hostname)) {
+      return true;
+    }
+
     // 测试和开发环境不进行 DNS 解析验证
     if (process.env.NODE_ENV === 'test' || process.env.NODE_ENV === 'development') {
       return true;

package/lib/url-evaluation/index.js

@@ -112,6 +112,19 @@ const getOriginUrl = (url) => {
   }
 };
 
+const isSlackWebhookUrl = (url) => {
+  try {
+    const parsed = new URL(url);
+    return parsed.protocol === 'https:' && parsed.hostname === 'hooks.slack.com';
+  } catch (e) {
+    return false;
+  }
+};
+
+const isDidDomainUrl = (hostname) => {
+  return isIpEcho(hostname) || isDidDomain(hostname) || isSlpDomain(hostname);
+};
+
 module.exports = {
   isIpEcho,
   isDidDomain,
@@ -120,4 +133,6 @@ module.exports = {
   evaluateURLs,
   isCustomDomain,
   getOriginUrl,
+  isSlackWebhookUrl,
+  isDidDomainUrl,
 };

package/package.json

@@ -3,7 +3,7 @@
   "publishConfig": {
     "access": "public"
   },
-  "version": "1.17.3-beta-20251126-121502-d0926972",
+  "version": "1.17.3-beta-20251128-095123-a76cb6bc",
   "description": "ArcBlock's JavaScript utility",
   "main": "lib/index.js",
   "files": [
@@ -18,14 +18,14 @@
   "author": "polunzh <polunzh@gmail.com> (http://github.com/polunzh)",
   "license": "Apache-2.0",
   "dependencies": {
-    "@abtnode/constant": "1.17.3-beta-20251126-121502-d0926972",
-    "@abtnode/db-cache": "1.17.3-beta-20251126-121502-d0926972",
+    "@abtnode/constant": "1.17.3-beta-20251128-095123-a76cb6bc",
+    "@abtnode/db-cache": "1.17.3-beta-20251128-095123-a76cb6bc",
     "@arcblock/did": "^1.27.12",
     "@arcblock/event-hub": "^1.27.12",
     "@arcblock/pm2": "^6.0.12",
-    "@blocklet/constant": "1.17.3-beta-20251126-121502-d0926972",
+    "@blocklet/constant": "1.17.3-beta-20251128-095123-a76cb6bc",
     "@blocklet/error": "^0.3.3",
-    "@blocklet/meta": "1.17.3-beta-20251126-121502-d0926972",
+    "@blocklet/meta": "1.17.3-beta-20251128-095123-a76cb6bc",
     "@blocklet/xss": "^0.3.10",
     "@ocap/client": "^1.27.12",
     "@ocap/mcrypto": "^1.27.12",
@@ -90,5 +90,5 @@
     "express": "^4.18.2",
     "fs-extra": "^11.2.0"
   },
-  "gitHead": "7039cacaad2a14a9573371e24e57cbbd6b6525c8"
+  "gitHead": "8d279ee5bfc3d025f164664bc43a16ff60860297"
 }