1 Commits

Author	SHA1	Message	Date
Gabriel Kaszewski	4cb8efb6ce	feat: SSRF protection — block private IP ranges on outgoing requests ... SsrfVerifier rejects private/reserved IPs (loopback, RFC1918, link-local, CGNAT, ULA) on all federation fetches. Raw reqwest calls in webfinger and backfill also validated. Debug mode bypasses via PermissiveVerifier. Closes #4	2026-05-30 02:48:35 +02:00