From ac7c3a21d2985121cd78d0ce274fbe603afe30e0 Mon Sep 17 00:00:00 2001 From: Travis O'Neal Date: Thu, 26 Mar 2026 22:26:57 -0400 Subject: [PATCH] fix: added dot boundary to amazonaws.com endsWith checks to ensure url authenticity Signed-off-by: Travis O'Neal --- .../src/entrypoints/urlReader/lib/AwsS3UrlReader.ts | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/packages/backend-defaults/src/entrypoints/urlReader/lib/AwsS3UrlReader.ts b/packages/backend-defaults/src/entrypoints/urlReader/lib/AwsS3UrlReader.ts index 802397d526..0b17ffe326 100644 --- a/packages/backend-defaults/src/entrypoints/urlReader/lib/AwsS3UrlReader.ts +++ b/packages/backend-defaults/src/entrypoints/urlReader/lib/AwsS3UrlReader.ts @@ -75,8 +75,10 @@ export function parseUrl( // Treat Amazon hosted separately because it has special region logic if ( - config.host.endsWith('amazonaws.com') || - config.host.endsWith('amazonaws.com.cn') + config.host === 'amazonaws.com' || + config.host === 'amazonaws.com.cn' || + config.host.endsWith('.amazonaws.com') || + config.host.endsWith('.amazonaws.com.cn') ) { const match = host.match( /^(?:([a-z0-9.-]+)\.)?s3(?:[.-]([a-z0-9-]+))?\.amazonaws\.com(\.cn)?$/,