Skip to content

[typescript-axios] per-route server overrides incompatible with axios 1.8.2 #298

@mnahkies

Description

@mnahkies

The path sanitation introduced in axios/axios#6810 to solve GHSA-jr5f-v2jv-69x6 likely breaks per route server overrides (ref; https://openapi-code-generator.nahkies.co.nz/guides/concepts/servers-object-handling).

Consider how to solve this without creating a similar vulnerability here.

I believe this can be worked around in the meantime by passing {allowAbsoluteUrls: true} in the axios config parameter / escape-hatch (if you are sure that this won't create a SSRF issue).

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions