root afc20712cb feat(api): capture POST + upload + SSRF-safe URL fetch ...

safe_fetch.js validates URLs before fetch: rejects non-http(s), literal
or DNS-resolved loopback / RFC1918 / link-local / CGNAT / metadata
addresses; follows redirects manually with the same checks on each hop.
Test fixtures gate the check with VOID_INGEST_ALLOW_PRIVATE for offline
fixtures that hit 127.0.0.1.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

2026-06-01 03:42:54 +10:00

..

blob_store.test.js

feat(ingest): content-addressed blob store

2026-06-01 03:35:06 +10:00

readability.test.js

feat(ingest): readability wrapper

2026-06-01 03:34:51 +10:00

safe_fetch.test.js

feat(api): capture POST + upload + SSRF-safe URL fetch

2026-06-01 03:42:54 +10:00