fix: use https agent

Author: b4s36t4

plugins/azure/contentSafety.ts

@@ -1,4 +1,4 @@
-import { Agent } from 'undici';
+import { Agent } from 'https';
 import {
   HookEventType,
   PluginContext,
@@ -83,11 +83,12 @@ export const handler: PluginHandler<{
 
   let agent: Agent | null = null;
   // privatelink doesn't contain a valid certificate, skipping verification if it's customHost.
+  // SECURITY NOTE: The following disables SSL certificate validation for custom hosts.
+  // This is necessary for Azure Private Link endpoints that may use self-signed certificates,
+  // but should only be used with trusted private endpoints.
   if (credentials.customHost) {
     agent = new Agent({
-      connect: {
-        rejectUnauthorized: false,
-      },
+      rejectUnauthorized: false,
     });
   }
 
@@ -111,12 +112,7 @@ export const handler: PluginHandler<{
   const timeout = parameters.timeout || 5000;
   let response;
   try {
-    response = await post(
-      url,
-      request,
-      { headers, dispatcher: agent },
-      timeout
-    );
+    response = await post(url, request, { headers }, timeout);
   } catch (e) {
     return { error: e, verdict: true, data };
   }

plugins/azure/pii.ts

@@ -1,4 +1,4 @@
-import { Agent } from 'undici';
+import { Agent } from 'https';
 import {
   HookEventType,
   PluginContext,
@@ -56,19 +56,20 @@ const redact = async (
 
   let agent: Agent | null = null;
   // privatelink doesn't contain a valid certificate, skipping verification if it's customHost.
+  // SECURITY NOTE: The following disables SSL certificate validation for custom hosts.
+  // This is necessary for Azure Private Link endpoints that may use self-signed certificates,
+  // but should only be used with trusted private endpoints.
   if (credentials?.customHost) {
     agent = new Agent({
-      connect: {
-        rejectUnauthorized: false,
-      },
+      rejectUnauthorized: false,
     });
   }
 
   const timeout = parameters.timeout || 5000;
   const response = await post(
     url,
     body,
-    { headers, dispatcher: agent },
+    { headers, dispatcher: undefined },
     timeout
   );
   return response;