azu / azu/request-filtering-agent

Support nodejs/undici

Open
#23 0 comments 0 reactions 0 assignees View on GitHub
Status: Proposal
Dominant language
TypeScript
Stars
27
Forks
11
PR merge metrics
No merged PRs in 30d

Description

Unfortunately, Node.js Fetch/undici does not support `HTTP.agent`.

- [SSRF protection in undici / native-node-fetch · Issue #2019 · nodejs/undici](https://github.com/nodejs/undici/issues/2019)

Since the `lookup` process is probably common, it may be possible to support undici Agent.
As another way, it may be possible to separate the packages.

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by reviewing the current request-filtering-agent HTTP(S) Agent implementation and the linked undici SSRF issue. Determine whether the shared lookup process can support an undici Agent or whether package separation is required; done means one of those approaches is implemented with its behavior verified.

Written by the indexing model from the issue text.

Assessment

Tech stack
nodejs, typescript
Domain
backend, security
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.