Fix edge case

timokoessler · timokoessler · commit 25efd71629ec · 2024-12-09T18:13:33.000+01:00
diff --git a/library/vulnerabilities/ssrf/isRequestToItself.ts b/library/vulnerabilities/ssrf/isRequestToItself.ts
@@ -12,7 +12,7 @@ export function isRequestToItself({
   port: number | undefined;
   paths: string[];
 }): boolean {
-  if (source !== "headers" || typeof port !== "number") {
+  if (source !== "headers" || typeof port !== "number" || paths.length === 0) {
     return false;
   }
 

Original file line number	Diff line number	Diff line change
`@@ -12,7 +12,7 @@ export function isRequestToItself({`
`12`	`12`	`port: number \| undefined;`
`13`	`13`	`paths: string[];`
`14`	`14`	`}): boolean {`
`15`		`- if (source !== "headers" \|\| typeof port !== "number") {`
	`15`	`+ if (source !== "headers" \|\| typeof port !== "number" \|\| paths.length === 0) {`
`16`	`16`	`return false;`
`17`	`17`	`}`
`18`	`18`