Fix: add bypass for ssrf check to force dissallow internal ip

2026-04-03 14:45:12 +02:00
parent 816696d0fe
commit bf2eea18c3
2 changed files with 3 additions and 3 deletions
--- a/server/src/services/collabService.ts
+++ b/server/src/services/collabService.ts
@@ -394,7 +394,7 @@ export async function fetchLinkPreview(url: string): Promise<LinkPreviewResult>
  const fallback: LinkPreviewResult = { title: null, description: null, image: null, url };

  const parsed = new URL(url);
-  const ssrf = await checkSsrf(url);
+  const ssrf = await checkSsrf(url, true);
  if (!ssrf.allowed) {
    return { ...fallback, error: ssrf.error } as LinkPreviewResult & { error?: string };
  }