Fix edge case

AikidoSec · Dec 9, 2024 · 25efd71 · 25efd71
1 parent 8c768a9
commit 25efd71
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/library/vulnerabilities/ssrf/isRequestToItself.ts b/library/vulnerabilities/ssrf/isRequestToItself.ts
@@ -12,7 +12,7 @@ export function isRequestToItself({
   port: number | undefined;
   paths: string[];
 }): boolean {
-  if (source !== "headers" || typeof port !== "number") {
+  if (source !== "headers" || typeof port !== "number" || paths.length === 0) {
     return false;
   }