fix: harden application trust boundaries (#1317)

2026-08-30 02:41:34 +00:00 · 2026-08-24 07:55:17 +08:00
parent 30d72554fc
commit 2de9bb236b
31 changed files with 287 additions and 132 deletions
@@ -250,17 +250,18 @@ export const GuacamoleDisplay = forwardRef<
          const origin = await resolveConnectionOrigin({
            connectionType: connectionProtocol,
          });
-          wsBase = await buildOriginWsUrl({
+          const target = await buildOriginWsUrl({
            origin,
            localPort: 30008,
            localPath: "/guacamole/websocket/",
            remotePath: "/guacamole/websocket/",
            includeJwt: false,
          });
-          if (!wsBase) {
+          if (!target) {
            onError?.(t("errors.remoteServerRequired"));
            return null;
          }
+          wsBase = target.url;
        } else {
          wsBase = buildGuacamoleWebSocketBaseUrl({
            isDev,