TestSSRFProtectedUrlType Class — langchain Architecture

Source Code

libs/core/tests/unit_tests/test_ssrf_protection.py lines 212–249

class TestSSRFProtectedUrlType:
    """Tests for SSRFProtectedUrl Pydantic type."""

    def test_valid_url_accepted(self) -> None:
        """Test that valid URLs are accepted by Pydantic schema."""

        class WebhookSchema(BaseModel):
            url: SSRFProtectedUrl

        schema = WebhookSchema(url="https://hooks.slack.com/services/xxx")
        assert str(schema.url).startswith("https://hooks.slack.com/")

    def test_localhost_rejected(self) -> None:
        """Test that localhost URLs are rejected by Pydantic schema."""

        class WebhookSchema(BaseModel):
            url: SSRFProtectedUrl

        with pytest.raises(ValidationError):
            WebhookSchema(url="http://localhost:8080")

    def test_private_ip_rejected(self) -> None:
        """Test that private IPs are rejected by Pydantic schema."""

        class WebhookSchema(BaseModel):
            url: SSRFProtectedUrl

        with pytest.raises(ValidationError):
            WebhookSchema(url="http://192.168.1.1")

    def test_cloud_metadata_rejected(self) -> None:
        """Test that cloud metadata is rejected by Pydantic schema."""

        class WebhookSchema(BaseModel):
            url: SSRFProtectedUrl

        with pytest.raises(ValidationError):
            WebhookSchema(url="http://169.254.169.254/latest/meta-data/")