fix(security): add SSRF protection to database tools and webhook delivery #11280
Annotations
8 errors and 6 warnings
|
Run tests with coverage
Process completed with exit code 1.
|
|
Run tests with coverage
sim#test: command (/home/runner/_work/sim/sim/apps/sim) /home/runner/.bun/bin/bun run test exited (1)
|
|
Run tests with coverage:
apps/sim/app/api/form/utils.test.ts#L176
AssertionError: expected "spy" to not be called at all, but actually been called 4 times
Received:
1st spy call:
Array [
"Access-Control-Allow-Origin",
"https://evil.com",
]
2nd spy call:
Array [
"Access-Control-Allow-Credentials",
"true",
]
3rd spy call:
Array [
"Access-Control-Allow-Methods",
"GET, POST, OPTIONS",
]
4th spy call:
Array [
"Access-Control-Allow-Headers",
"Content-Type, X-Requested-With",
]
Number of calls: 4
❯ app/api/form/utils.test.ts:176:44
|
|
Run tests with coverage:
apps/sim/lib/mcp/utils.test.ts#L291
AssertionError: expected 'Internal server error' to be 'Something went wrong' // Object.is equality
Expected: "Something went wrong"
Received: "Internal server error"
❯ lib/mcp/utils.test.ts:291:28
|
|
Run tests with coverage:
apps/sim/lib/mcp/utils.test.ts#L284
AssertionError: expected 'Invalid request parameters' to be 'Validation failed for input' // Object.is equality
Expected: "Validation failed for input"
Received: "Invalid request parameters"
❯ lib/mcp/utils.test.ts:284:28
|
|
Run tests with coverage:
apps/sim/lib/mcp/utils.test.ts#L277
AssertionError: expected 'Invalid request parameters' to be 'Missing required field: name' // Object.is equality
Expected: "Missing required field: name"
Received: "Invalid request parameters"
❯ lib/mcp/utils.test.ts:277:28
|
|
Run tests with coverage:
apps/sim/lib/mcp/utils.test.ts#L270
AssertionError: expected 'Invalid request parameters' to be 'Invalid parameter provided' // Object.is equality
Expected: "Invalid parameter provided"
Received: "Invalid request parameters"
❯ lib/mcp/utils.test.ts:270:28
|
|
Run tests with coverage:
apps/sim/lib/mcp/utils.test.ts#L249
AssertionError: expected 'Resource not found' to be 'Server not accessible' // Object.is equality
Expected: "Server not accessible"
Received: "Resource not found"
❯ lib/mcp/utils.test.ts:249:28
|
|
Post Mount node_modules (Sticky Disk)
Skipping sticky disk commit due to previous step failures
|
|
Post Mount node_modules (Sticky Disk)
- Step: unknown (failed)
|
|
Post Mount node_modules (Sticky Disk)
Found 2 failed/cancelled steps in previous workflow steps
|
|
Post Mount Turbo cache (Sticky Disk)
Skipping sticky disk commit due to previous step failures
|
|
Post Mount Turbo cache (Sticky Disk)
- Step: unknown (failed)
|
|
Post Mount Turbo cache (Sticky Disk)
Found 2 failed/cancelled steps in previous workflow steps
|
Loading