|
|
@@ -1,12 +1,12 @@
|
|
|
import { NextRequest, NextResponse } from "next/server";
|
|
|
-import { STORAGE_KEY, internalWhiteWebDavDomains } from "../../../constant";
|
|
|
+import { STORAGE_KEY, internalWhiteWebDavEndpoints } from "../../../constant";
|
|
|
import { getServerSideConfig } from "@/app/config/server";
|
|
|
|
|
|
const config = getServerSideConfig();
|
|
|
|
|
|
-const mergedWhiteWebDavDomains = [
|
|
|
- ...internalWhiteWebDavDomains,
|
|
|
- ...config.whiteWebDevDomains,
|
|
|
+const mergedWhiteWebDavEndpoints = [
|
|
|
+ ...internalWhiteWebDavEndpoints,
|
|
|
+ ...config.whiteWebDevEndpoints,
|
|
|
].filter((domain) => Boolean(domain.trim()));
|
|
|
|
|
|
async function handle(
|
|
|
@@ -24,7 +24,7 @@ async function handle(
|
|
|
|
|
|
// Validate the endpoint to prevent potential SSRF attacks
|
|
|
if (
|
|
|
- !mergedWhiteWebDavDomains.some((domain) => endpoint?.startsWith(domain))
|
|
|
+ !mergedWhiteWebDavEndpoints.some((white) => endpoint?.startsWith(white))
|
|
|
) {
|
|
|
return NextResponse.json(
|
|
|
{
|