Something went wrong. Try again.
Monorepo for Tangled
Something went wrong. Try again.
1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253package netutil
import ( "fmt" "net" "net/http" "net/url"
"github.com/bluesky-social/indigo/util/ssrf" "github.com/gorilla/websocket")
// refuses non-public ips to prevent ssrffunc SSRFDialer(dev bool) *net.Dialer { if dev { return &net.Dialer{} } return ssrf.PublicOnlyDialer()}
// refuses non-public ips to prevent ssrffunc SSRFTransport(dev bool) *http.Transport { if dev { return &http.Transport{} } return ssrf.PublicOnlyTransport()}
// refuses non-public ips to prevent ssrffunc SSRFWebsocketDialer(dev bool) *websocket.Dialer { dialer := *websocket.DefaultDialer dialer.NetDialContext = SSRFDialer(dev).DialContext return &dialer}
func EnforceWSSURL(rawURL string, dev bool) (*url.URL, error) { u, err := url.Parse(rawURL) if err != nil { return nil, fmt.Errorf("invalid url: %w", err) } switch u.Scheme { case "wss": case "ws": host := net.ParseIP(u.Hostname()) if !dev && (host == nil || !host.IsLoopback()) { return nil, fmt.Errorf("insecure scheme %q is prohibited outside loopback in production; use wss://", u.Scheme) } default: return nil, fmt.Errorf("unsupported websocket scheme %q", u.Scheme) } return u, nil}