Harden job import SSRF validation

2026-04-11 16:26:14 +02:00
parent b4719a9916
commit 6a223a4b70
4 changed files with 170 additions and 24 deletions
@@ -128,7 +128,8 @@ builder.Services.AddHostedService<CvProcessingHostedService>();
 builder.Services.AddHttpClient("jobimport")
    .ConfigurePrimaryHttpMessageHandler(() => new HttpClientHandler
    {
-        AutomaticDecompression = DecompressionMethods.All
+        AutomaticDecompression = DecompressionMethods.All,
+        AllowAutoRedirect = false
    });

 // Local AI service (FastAPI). Supports summarization and OCR/text extraction.
@@ -166,6 +167,7 @@ builder.Services.AddIdentityCore<ApplicationUser>(options =>
 builder.Services.AddScoped<ITokenService, TokenService>();

 builder.Services.AddSingleton<UniversalJobParser>();
+builder.Services.AddSingleton<IHostAddressResolver, DnsHostAddressResolver>();
 builder.Services.AddSingleton<IJobSitePlugin, FinnPlugin>();
 builder.Services.AddSingleton<IJobSitePlugin, NavPlugin>();
 builder.Services.AddSingleton<IJobSitePlugin, LinkedInPlugin>();