Skip to content

♻️ Refactor: api security enhancement - #3699

Open
Jasonxia007 wants to merge 9 commits into
developfrom
xyc/ssrf-fix
Open

♻️ Refactor: api security enhancement#3699
Jasonxia007 wants to merge 9 commits into
developfrom
xyc/ssrf-fix

Conversation

@Jasonxia007

@Jasonxia007 Jasonxia007 commented Aug 18, 2026

Copy link
Copy Markdown
Contributor

安全性专项提升,本轮涉及接口:

/tasks/load_image

  • 增加登录鉴权
  • 拒绝私网、回环、链路本地等非公网地址
  • 禁止自动重定向和环境代理

/tasks/filter_important_image

  • 增加相同的鉴权与 URL 检查

/image

  • 增加登录鉴权
  • 普通图片 URL 仅允许公网地址
  • 保留固定 AIDP 地址处理
  • 向 data-process 传递登录凭据
  • 改用安全的查询参数传递方式

/model/temporary_healthcheck

  • 增加登录鉴权
  • 在模型连接检查前拦截私网和回环 base_url
  • 支持检查 HTTP、HTTPS、WS、WSS 地址

/agent/update

  • 增加数据库层 tenant_id 逻辑隔离

/indices/{index_name}/*

  • 增加登录鉴权

# Conflicts:
#	backend/agents/create_agent_info.py
#	backend/services/agent_service.py
Comment thread backend/services/data_process_service.py Fixed
Comment thread backend/apps/image_app.py Outdated
@Jasonxia007 Jasonxia007 changed the title xyc/ssrf-fix ♻️ Refactor: api security enhancement Aug 19, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants