fix: keep SSRF DNS resolver on http(s)-proxy crawler paths

Commit 134ab54 dropped the safe DNS resolver for any configured proxy, but
that guard is only pointless for SOCKS proxies (where the proxy resolves the
target). On an http(s):// proxy reqwest still resolves the target locally, so
a hostname resolving to a private IP would be reachable. Narrow the exemption
to SOCKS-only via should_attach_safe_resolver.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
This commit is contained in:
MechaCat02
2026-07-11 13:46:39 +02:00
parent 91d6a50dba
commit 5b46eab73a
5 changed files with 65 additions and 13 deletions

View File

@@ -1,6 +1,6 @@
{
"name": "mangalord-frontend",
"version": "0.124.14",
"version": "0.124.15",
"private": true,
"type": "module",
"scripts": {