Function test_ssrf_log_shows_blocked_address

e2e/python/test_sandbox_policy.py:697–732

SSRF-3: Proxy log includes block reason when SSRF check fires. Loopback addresses are always-blocked. Since implicit_allowed_ips_for_ip_host now skips always-blocked hosts, 127.0.0.1 falls through to the default resolve_and_reject_internal path which blocks it as an internal address.

(
    sandbox: Callable[..., Sandbox],
)

def test_ssrf_log_shows_blocked_address(
    sandbox: Callable[..., Sandbox],
) -> None:
    """SSRF-3: Proxy log includes block reason when SSRF check fires.

    Loopback addresses are always-blocked.  Since implicit_allowed_ips_for_ip_host
    now skips always-blocked hosts, 127.0.0.1 falls through to the default
    resolve_and_reject_internal path which blocks it as an internal address.
    The shorthand log should include 'ssrf' and a '[reason:' tag for denied events.
    """
    policy = _base_policy(
        network_policies={
            "internal": sandbox_pb2.NetworkPolicyRule(
                name="internal",
                endpoints=[
                    sandbox_pb2.NetworkEndpoint(host="127.0.0.1", port=80),
                ],
                binaries=[sandbox_pb2.NetworkBinary(path="/**")],
            ),
        },
    )
    spec = datamodel_pb2.SandboxSpec(policy=policy)
    with sandbox(spec=spec, delete_on_exit=True) as sb:
        sb.exec_python(_proxy_connect(), args=("127.0.0.1", 80))

        log_result = sb.exec_python(_read_openshell_log())
        assert log_result.exit_code == 0, log_result.stderr
        log = log_result.stdout
        # OCSF shorthand uses "engine:ssrf" for SSRF blocks
        assert "engine:ssrf" in log.lower() or "ssrf" in log.lower(), (
            f"Expected SSRF block indicator in proxy log, got:\n{log}"
        )
        # Shorthand for denied events should include [reason:...] tag
        assert "[reason:" in log.lower(), (
            f"Expected [reason:] tag in denied event shorthand, got:\n{log}"
        )


# =============================================================================