CalvinBackup/gstack
1
0
Fork 0
mirror of https://github.com/garrytan/gstack.git synced 2026-07-20 06:28:00 +02:00
Code Issues Packages Projects Releases Wiki Activity

fix(browse): case-insensitive exfiltration-domain blocklist matching

Browse Source 
urlBlocklistFilter compared URLs against the exfiltration blocklist with
case-sensitive substring checks, so an uppercased sink (https://WEBHOOK.SITE/x)
bypassed the guard and reached the scoped browser agent. Normalize the page URL
and extracted content URLs to lowercase before comparing, and make URL
extraction scheme-insensitive so HTTPS:// links are still caught.

Fixes #2190

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
This commit is contained in:
t
2026-07-10 14:39:32 -07:00
parent 7c9df1c568
commit 279fda4dc5
2 changed files with 51 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
browse/src/content-security.ts
+13 -4
View File
@@ -338,19 +338,28 @@ const BLOCKLIST_DOMAINS = [
export function urlBlocklistFilter(content: string, url: string, _command: string): ContentFilterResult {
const warnings: string[] = [];
// Matching is case-insensitive. Hostnames and URL schemes are
// case-insensitive (RFC 3986), so an uppercased sink like
// https://WEBHOOK.SITE/x must not slip past the blocklist. Normalize the
// haystack to lowercase; BLOCKLIST_DOMAINS entries are lowercase by
// construction, so a direct compare then holds.
// Check page URL
const normalizedUrl = url.toLowerCase();
for (const domain of BLOCKLIST_DOMAINS) {
if (url.includes(domain)) {
if (normalizedUrl.includes(domain)) {
warnings.push(`Page URL matches blocklisted domain: ${domain}`);
}
}
// Check for blocklisted URLs in content (links, form actions)
const urlPattern = /https?:\/\/[^\s"'<>]+/g;
// Check for blocklisted URLs in content (links, form actions). The `i` flag
// keeps an uppercased scheme (HTTPS://) from evading URL extraction.
const urlPattern = /https?:\/\/[^\s"'<>]+/gi;
const contentUrls = content.match(urlPattern) || [];
for (const contentUrl of contentUrls) {
const normalizedContentUrl = contentUrl.toLowerCase();
for (const domain of BLOCKLIST_DOMAINS) {
if (contentUrl.includes(domain)) {
if (normalizedContentUrl.includes(domain)) {
warnings.push(`Content contains blocklisted URL: ${contentUrl.slice(0, 100)}`);
break;
}