Skip to content

Commit 267981b

Browse files
fix: none final_url
1 parent ebf9516 commit 267981b

1 file changed

Lines changed: 11 additions & 1 deletion

File tree

apps/api/plane/bgtasks/work_item_link_task.py

Lines changed: 11 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -38,7 +38,17 @@ def crawl_work_item_link_title_and_favicon(url: str) -> Dict[str, Any]:
3838

3939
soup = None
4040
title = None
41-
final_url = None
41+
final_url = url
42+
43+
parsed = urlparse(url)
44+
45+
try:
46+
ip = ipaddress.ip_address(parsed.hostname)
47+
if ip.is_private or ip.is_loopback or ip.is_reserved:
48+
raise ValueError("Access to private/internal networks is not allowed")
49+
except ValueError:
50+
# Not an IP address, continue with domain validation
51+
pass
4252

4353
try:
4454
response = requests.get(url, headers=headers, timeout=1)

0 commit comments

Comments
 (0)