encounter/adk-python
0
0
Fork 0
mirror of https://github.com/encounter/adk-python.git synced 2026-03-30 10:57:20 -07:00
Code Issues Packages Projects Releases Wiki Activity

fix: fix SSRF vulnerability in load_web_page by disabling automatic redirects

Browse Source 
Co-authored-by: Sasha Sobran <asobran@google.com>
PiperOrigin-RevId: 853901476
This commit is contained in:
Sasha Sobran
2026-01-08 15:12:59 -08:00
committed by Copybara-Service
parent f1ccc0cfca
commit 3c51ee7f48
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/google/adk/tools/load_web_page.py
+2 -1
View File
@@ -28,7 +28,8 @@ def load_web_page(url: str) -> str:
"""
from bs4 import BeautifulSoup
response = requests.get(url)
# Set allow_redirects=False to prevent SSRF attacks via redirection.
response = requests.get(url, allow_redirects=False)
if response.status_code == 200:
soup = BeautifulSoup(response.content, 'lxml')