956e98b04191ea76b282cb9b045aebcb9e52f5f1
Add post-DNS SSRF validation using dns.lookup() to verify resolved IPs are not in private ranges. Block non-http(s) schemes (file://, ftp://) in discoverFeedUrl(). Extract isPrivateIp() helper for reuse. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Releases
72
Languages
Rust
42.1%
Vue
21.6%
TypeScript
15.2%
Shell
8.1%
JavaScript
5.5%
Other
7.5%