dale053 fe82a96193 Fix: add SSRF guard for agent test_db_connection endpoint (#14860) ...

### What problem does this PR solve?

Closes #14858

The `test_db_connection` endpoint in the agent API accepts a
user-supplied `host` and connects to it directly via database drivers
(MySQL/PostgreSQL) without any validation. This allows an attacker to
probe internal network addresses (e.g. `127.0.0.1`, `10.x.x.x`,
link-local, etc.) through the server — a classic Server-Side Request
Forgery (SSRF) vulnerability.

This PR adds an SSRF guard that resolves the host and rejects any
address that is not globally routable before the database connection is
attempted.

**Changes:**
- **`common/ssrf_guard.py`** — Added `assert_host_is_safe()`, a
host-level counterpart of the existing `assert_url_is_safe()`, designed
for non-HTTP protocols (database drivers) where there is no URL to
parse.
- **`api/apps/restful_apis/agent_api.py`** — Call
`assert_host_is_safe(req["host"])` at the top of `test_db_connection` so
that non-public hosts are rejected early with a clear error message.

Fixes #14858

### Type of change

- [x] Bug Fix (non-breaking change which fixes an issue)

---------

Co-authored-by: Jin Hai <haijin.chn@gmail.com>

2026-05-18 14:32:44 +08:00

..

auth

Refactor user REST API (#14334)

2026-04-24 10:25:15 +08:00

restful_apis

Fix: add SSRF guard for agent test_db_connection endpoint (#14860)

2026-05-18 14:32:44 +08:00

sdk

fix(agentbot): aggregate structured output in non-streaming completions (#14848)

2026-05-15 12:42:33 +08:00

services

Push metadata filters down to Infinity (#14974)

2026-05-18 14:22:04 +08:00

__init__.py

Fix: bind memory message user_id to authenticated user for JWT auth (#14745)

2026-05-11 13:26:05 +08:00

backward_compat.py

Add REST API backward compatibility (#14872)

2026-05-13 11:44:40 +08:00

llm_app.py

Fix: llm add api key overridden (#14885)

2026-05-13 17:15:32 +08:00