URIValidator.inAzureStorageDomain Method

Use Case

The code is making requests to a URL constructed using untrusted inputs, where an input is considered untrusted if it comes from user input or other services.

AND

The URL is expected to belong to an Azure Storage Domain.

• If you instead expect the domain to be in any domain or an untrusted domain, see AntiSSRFPolicy.
• If you instead expect the URL to be an Azure Key Vault endpoint, see inAzureKeyVaultDomain.
• If you instead expect the domain to be another specific, trusted domain, see inDomain.

Definition

Validates if a URL is an Azure Storage endpoint.

inAzureStorageDomain(url: URL | string): boolean

Parameters

url: URL | string

The URL to be evaluated.

Returns

• true if url belongs to any of the listed Azure Storage domains.
• false if url does not belong to any of the listed Azure Storage domains, the url is not a valid URL, or the protocol is not HTTP/S.

Examples

const { URIValidator } = require('@microsoft/antissrf');

URIValidator.inAzureStorageDomain('https://mystorageaccount.blob.core.windows.net/container/file.txt');
// → true

URIValidator.inAzureStorageDomain('https://evil.com/data');
// → false

Azure Storage Domain Names

inAzureStorageDomain will evaluate whether the given parameter belongs to any combination of the following domains and services:

Domains:

• core.windows.net
• storage.azure.net
• core.usgovcloudapi.net
• core.chinacloudapi.cn

Services:

• blob
• web
• dfs
• file
• queue
• table