diff --git a/src/google/adk/tools/load_web_page.py b/src/google/adk/tools/load_web_page.py index eaefedcc..9ab82af7 100644 --- a/src/google/adk/tools/load_web_page.py +++ b/src/google/adk/tools/load_web_page.py @@ -28,7 +28,8 @@ def load_web_page(url: str) -> str: """ from bs4 import BeautifulSoup - response = requests.get(url) + # Set allow_redirects=False to prevent SSRF attacks via redirection. + response = requests.get(url, allow_redirects=False) if response.status_code == 200: soup = BeautifulSoup(response.content, 'lxml')