Potential fix for code scanning alert no. 18: Server-side request forgery

CodeMeAPixel · github-advanced-security[bot] · CodeMeAPixel · commit a2da666a379f · 2026-06-12T12:10:46.000-06:00
Co-authored-by: Copilot Autofix powered by AI &lt;62310815+github-advanced-security[bot]@users.noreply.github.com&gt;
diff --git a/app/api/admin/integrations/test/route.ts b/app/api/admin/integrations/test/route.ts
@@ -56,6 +56,9 @@ function getSafeKenerOrigin(baseUrl?: string): string | null {
   if (parsed.username || parsed.password) return null
   if (isPrivateOrLocalHost(parsed.hostname)) return null
 
+  const allowedOrigins = new Set(['https://emberlystat.us'])
+  if (!allowedOrigins.has(parsed.origin)) return null
+
   return parsed.origin
 }
 

Original file line number	Diff line number	Diff line change
`@@ -56,6 +56,9 @@ function getSafeKenerOrigin(baseUrl?: string): string \| null {`
`56`	`56`	`if (parsed.username \|\| parsed.password) return null`
`57`	`57`	`if (isPrivateOrLocalHost(parsed.hostname)) return null`
`58`	`58`
	`59`	`+ const allowedOrigins = new Set(['https://emberlystat.us'])`
	`60`	`+ if (!allowedOrigins.has(parsed.origin)) return null`
	`61`	`+`
`59`	`62`	`return parsed.origin`
`60`	`63`	`}`
`61`	`64`