Sanitize URI inputs for SSRF vuln

rapid7 · Jun 27, 2024 · 1369939 · 1369939
1 parent 7c2bd45
commit 1369939
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/main/protocol.js b/src/main/protocol.js
@@ -44,7 +44,7 @@ function registerHandlers() {
 
     let data;
     try {
-      data = await refreshJit(profile);
+      data = await refreshJit(encodeURI(profile));
     } catch (err) {
       const errBody = JSON.stringify({
         error_message: err?.message || 'unknown',