Fix Python SSRF ISSUE (#534)

* update * fix
baidubce · Oct 18, 2024 · a24a975 · a24a975
1 parent e4df041
commit a24a975
Showing 1 changed file with 4 additions and 4 deletions.
diff --git a/appbuilder/core/_session.py b/appbuilder/core/_session.py
@@ -59,16 +59,16 @@ def send(self, request, **kwargs):
 
     @session_post
     def post(self, url, data=None, json=None, **kwargs):
-        return super().post(url=url, data=data, json=json, **kwargs)
+        return super().post(url=url, data=data, json=json, allow_redirects=False, **kwargs)
 
     @session_post
     def delete(self, url, **kwargs):
-        return super().delete(url=url, **kwargs)
+        return super().delete(url=url, allow_redirects=False, **kwargs)
 
     @session_post
     def get(self, url, **kwargs):
-        return super().get(url=url, **kwargs)
+        return super().get(url=url, allow_redirects=False, **kwargs)
 
     @session_post
     def put(self, url, data=None, **kwargs):
-        return super().put(url=url, data=data, **kwargs)
+        return super().put(url=url, data=data, allow_redirects=False, **kwargs)