Sliverp
0552ec899f
fix(qqbot): allow RFC2544 benchmark range for token fetch ( #88984 ) ( #89015 )
...
* fix(qqbot): allow RFC2544 benchmark range for token fetch (#88984 )
QQ Bot `bots.qq.com` token-fetch path was failing for users whose DNS resolver maps the hostname into the RFC 2544 benchmark range `198.18.0.0/15` (commonly seen with fake-IP proxy stacks: sing-box, Clash, Surge, WSL2 DNS). The default SSRF guard treats that range as private and blocks the request, surfacing as "Network error getting access_token: Blocked: resolves to private/internal/special-use IP address".
Pass a host-scoped `SsrFPolicy` (`allowRfc2544BenchmarkRange: true`) to the single hard-coded `TOKEN_URL` request, mirroring the existing `QQBOT_MEDIA_SSRF_POLICY` pattern used by the media path. Because `TOKEN_URL` is a const and not user-controlled, the relaxation cannot widen attack surface to other hosts.
Adds a regression test asserting `policy: { allowRfc2544BenchmarkRange: true }` is forwarded into `fetchWithSsrFGuard`, and updates the existing equality assertion accordingly.
Fixes #88984
* fix(qqbot): scope token ssrf policy
2026-06-02 15:00:39 +08:00
..
2026-06-01 23:03:27 -04:00
2026-06-01 10:26:08 -04:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-02 06:23:53 +02:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 01:12:21 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:43:31 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-02 04:16:58 +00:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-02 02:35:12 -04:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:03:27 -04:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 16:45:46 -07:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-02 00:23:41 +02:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-02 14:22:25 +08:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-02 02:35:12 -04:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 01:07:35 -04:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-02 15:00:39 +08:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-05-31 09:32:52 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-05-27 19:24:04 +01:00
2026-05-12 00:23:11 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-06-01 23:06:55 +01:00
2026-05-16 12:38:51 +01:00
2026-05-31 22:40:48 +01:00
2026-05-31 15:53:14 +01:00
2026-05-31 22:40:48 +01:00