Skip to content

In K8S, set SSRF leads to short domain name resolution failure. #264

Description

@qiang1218

Version: 0.2.15
Environment: Python code execution using the requests library.
K8s: Sandbox and SSRF are in the same namespace.

When SSRF is enabled, setting the SSRF proxy to use a short domain name results in domain name resolution failure. However, using the fully qualified domain name (FQDN) leads to a successful request.

Image

in sandbox pod:

cd /var/sandbox/sandbox-python/etc
hosts resolv.conf ssl

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions