Trim redundant comments

This commit is contained in:
SGavrl committed 2026-06-10 19:15:59 +00:00
1 parent 6c9d5c55ad
commit fa4928faa6
3 files changed
+6 -13

No files matched your search

+1 -3
View File
@@ -509,9 +509,7 @@ fn build_request_client(proxy_url: Option<&str>) -> Result<reqwest::Client, Stri
let mut builder = reqwest::Client::builder()
.redirect(reqwest::redirect::Policy::none())
.timeout(std::time::Duration::from_millis(timeout_ms))
// SSRF: same DNS-resolving guard as the navigation client, so a scripted
// fetch()/XHR cannot reach a private/loopback IP via a public hostname
// (env/--allow-private-network still relaxes it inside the resolver).
// SSRF guard: also reject hostnames that resolve to a private/loopback IP.
.dns_resolver(std::sync::Arc::new(obscura_net::SsrfGuardResolver::new(false)))
// Be explicit about pool size: default is unbounded which is fine,
// but pool_idle_timeout default (90s) is short for SPA-heavy