feat(a2a): implement robust URL parsing and SSRF protection for agent cards

2026-03-17 17:41:24 -07:00 · 2026-03-05 16:51:19 -08:00
parent dae8d85a18
commit a42fdee8a8
3 changed files with 51 additions and 5 deletions
--- a/packages/core/src/utils/fetch.ts
+++ b/packages/core/src/utils/fetch.ts
@@ -22,6 +22,7 @@ setGlobalDispatcher(
 const PRIVATE_IP_RANGES = [
  /^10\./,
  /^127\./,
+  /^169\.254\./,
  /^172\.(1[6-9]|2[0-9]|3[0-1])\./,
  /^192\.168\./,
  /^::1$/,