Cursor Agentandnsrb 8c9673444f feat(sandbox): expose screened $axios in script context
Add $axios to the VM sandbox with a request interceptor that blocks
non-http(s) URLs and common SSRF targets (localhost, private IPs,
link-local, and cloud metadata hosts). require('axios') and import
axios resolve to the same screened instance so scripts cannot bypass
URL screening.

Co-authored-by: Nasyarobby Putra <nasyarobby@gmail.com>
2026-08-14 04:56:25 +00:00
S
Description
No description provided
1.2 MiB
Languages
JavaScript 99.9%