@joshuaswarren/openclaw-engram 9.0.21 → 9.0.23

package/dist/index.js

@@ -25403,6 +25403,13 @@ function diffGraphSnapshots(previous, next) {
 }
 
 // src/dashboard-runtime.ts
+var LOOPBACK_HOSTS = /* @__PURE__ */ new Set(["127.0.0.1", "localhost", "::1"]);
+function normalizeOriginHostname(hostname) {
+  if (hostname.startsWith("[") && hostname.endsWith("]")) {
+    return hostname.slice(1, -1);
+  }
+  return hostname;
+}
 function websocketAcceptKey(clientKey) {
   return createHash9("sha1").update(`${clientKey}258EAFA5-E914-47DA-95CA-C5AB0DC85B11`).digest("base64");
 }
@@ -25572,11 +25579,17 @@ var GraphDashboardServer = class {
   handleUpgrade(req, socket) {
     const upgrade = typeof req.headers.upgrade === "string" ? req.headers.upgrade.toLowerCase() : "";
     const key = req.headers["sec-websocket-key"];
+    const origin = typeof req.headers.origin === "string" ? req.headers.origin : "";
     if (upgrade !== "websocket" || typeof key !== "string") {
       socket.write("HTTP/1.1 400 Bad Request\r\n\r\n");
       socket.destroy();
       return;
     }
+    if (!this.isAllowedOrigin(origin)) {
+      socket.write("HTTP/1.1 403 Forbidden\r\n\r\n");
+      socket.destroy();
+      return;
+    }
     const accept = websocketAcceptKey(key);
     socket.write(
       [
@@ -25602,6 +25615,19 @@ var GraphDashboardServer = class {
     });
     socket.write(encodeTextFrame(hello));
   }
+  isAllowedOrigin(origin) {
+    if (!origin) return false;
+    try {
+      const parsed = new URL(origin);
+      const hostname = normalizeOriginHostname(parsed.hostname);
+      if (!LOOPBACK_HOSTS.has(hostname)) return false;
+      if (parsed.protocol !== "http:") return false;
+      const originPort = parsed.port ? Number(parsed.port) : 80;
+      return Number.isFinite(originPort) && originPort === this.boundPort;
+    } catch {
+      return false;
+    }
+  }
   broadcast(payload) {
     const frame = encodeTextFrame(JSON.stringify(payload));
     for (const [id, client] of this.clients.entries()) {