From 7022767fbc8b159de0e6c60f79e3f7cc79bfc66b Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E5=B0=8F=E9=BB=91?= <xiaohei@openclaw>
Date: Sat, 14 Mar 2026 16:10:41 +0800
Subject: [PATCH] fix(web-fetch): load ssrf policy from config

---
 src/agents/tools/web-fetch.ssrf.test.ts | 18 +++++++++++++-----
 1 file changed, 13 insertions(+), 5 deletions(-)

diff --git a/src/agents/tools/web-fetch.ssrf.test.ts b/src/agents/tools/web-fetch.ssrf.test.ts
index d7d99072439..75d9632203c 100644
--- a/src/agents/tools/web-fetch.ssrf.test.ts
+++ b/src/agents/tools/web-fetch.ssrf.test.ts
@@ -38,15 +38,23 @@ async function createWebFetchToolForTest(params?: {
   ssrfPolicy?: ssrf.SsrFPolicy;
 }) {
   const { createWebFetchTool } = await import("./web-tools.js");
+
+  // Build config with ssrfPolicy injected via tools.web.fetch.ssrfPolicy
+  const fetchConfig: Record<string, unknown> = {
+    cacheTtlMinutes: 0,
+    firecrawl: params?.firecrawl ?? { enabled: false },
+  };
+
+  // Inject ssrfPolicy via config key if provided
+  if (params?.ssrfPolicy) {
+    fetchConfig.ssrfPolicy = params.ssrfPolicy;
+  }
+
   return createWebFetchTool({
     config: {
       tools: {
         web: {
-          fetch: {
-            cacheTtlMinutes: 0,
-            firecrawl: params?.firecrawl ?? { enabled: false },
-            ...(params?.ssrfPolicy ? { ssrfPolicy: params?.ssrfPolicy } : {}),
-          },
+          fetch: fetchConfig,
         },
       },
     },