Waleedandaayush598 996dc96d6e fix(security): allow HTTP for localhost and loopback addresses (#3304) ...

* fix(security): allow localhost HTTP without weakening SSRF protections

* fix(security): remove extraneous comments and fix failing SSRF test

* fix(security): derive isLocalhost from hostname not resolved IP in validateUrlWithDNS

* fix(security): verify resolved IP is loopback when hostname is localhost in validateUrlWithDNS

---------

Co-authored-by: aayush598 <aayushgid598@gmail.com>

2026-02-22 14:58:11 -08:00

..

docs

feat(tools): added hex (#3293)

2026-02-21 16:44:39 -08:00

sim

fix(security): allow HTTP for localhost and loopback addresses (#3304)

2026-02-22 14:58:11 -08:00