fix(security): reject userinfo in is_url_safe to prevent SSRF bypass (#97)#98

Merged

HackingRepo merged 3 commits into

HackingRepo:mainfrom

andrewmkhoury:fix/ssrf-userinfo-bypass

Jun 2, 2026

Commits on May 29, 2026

fix(security): reject userinfo in is_url_safe to prevent SSRF bypass
andrewmkhoury
committed
fix: address review comments — rebuild dist, fix is_redirect_safe
andrewmkhoury
committed
refactor: extract is_parsed_url_safe to eliminate duplicated checks
andrewmkhoury
committed