resolvePublicly

@forge/monorepo

---

@forge/monorepo / backend/src / resolvePublicly

Function: resolvePublicly()

resolvePublicly(hostname, resolve): Promise<readonly string[]>

Defined in: backend/src/toolkit/ssrf.ts:196

Resolves a host and refuses it if any address is private — then returns the addresses to connect to.

Any, not all. A name with two A records, one public and one link-local, is a rebinding attack with the work done up front: connecting to whichever the resolver happened to order first is a coin flip, and a check that passes on a coin flip has not checked anything.

Parameters

hostname

string

resolve

Resolve

Returns

Promise<readonly string[]>