{"record":{"id":"1943bbbeb6c15937","repo":"diegosouzapw/OmniRoute","slug":"ssrf-guard-blocked-request-to-url-host-intern","errorCode":null,"errorMessage":"SSRF guard blocked request to ${url.host} — internal/reserved addresses are not allowed","messagePattern":"SSRF guard blocked request to (.+?) — internal/reserved addresses are not allowed","errorType":"exception","errorClass":"Error","httpStatus":null,"severity":"error","filePath":"src/lib/memory/genericBackend.ts","lineNumber":243,"sourceCode":"    if (filter.limit !== undefined) out[qp.limit] = String(filter.limit);\n    if (filter.offset !== undefined) out[qp.offset] = String(filter.offset);\n    if (filter.orderBy) out[qp.orderBy] = filter.orderBy;\n    if (filter.orderDir) out[qp.orderDir] = filter.orderDir;\n\n    return out;\n  }\n\n  private async request<T>(\n    method: string,\n    path: string,\n    body?: unknown,\n    queryParams?: Record<string, string>\n  ): Promise<T> {\n    const url = new URL(path, this.config.baseUrl);\n\n    // SSRF guard: reject requests to internal/reserved IP ranges\n    if (!isValidHttpUrl(url)) {\n      throw new Error(\n        `SSRF guard blocked request to ${url.host} — internal/reserved addresses are not allowed`\n      );\n    }\n    if (queryParams) {\n      Object.entries(queryParams).forEach(([key, value]) => {\n        url.searchParams.append(key, value);\n      });\n    }\n\n    const headers: Record<string, string> = {\n      \"Content-Type\": \"application/json\",\n      ...this.config.headers,\n    };\n\n    if (this.config.apiKey) {\n      headers[\"Authorization\"] = `Bearer ${this.config.apiKey}`;\n    }\n","sourceCodeStart":225,"sourceCodeEnd":261,"githubUrl":"https://github.com/diegosouzapw/OmniRoute/blob/a179ffed5bb2e0b883b9ae7214ce8717b2a94c4d/src/lib/memory/genericBackend.ts#L225-L261","documentation":"Error \"SSRF guard blocked request to ${url.host} — internal/reserved addresses are not allowed\" thrown in diegosouzapw/OmniRoute.","triggerScenarios":"Thrown at src/lib/memory/genericBackend.ts:243 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":[],"exampleFix":null,"handlingStrategy":null,"validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"a179ffed5bb2e0b883b9ae7214ce8717b2a94c4d","analyzedAt":"2026-08-25T18:35:09.898Z","schemaVersion":2},"datasetVersion":"2026-08-25T21:54:21.419Z"}