security-fixes

[stefangutica]

Reasoning

• Improve security around NFT media processing.
• Reduce the risk of unsafe redirects and SSRF-style requests.

Proposed Changes

• Added URL safety checks to validate public versus internal destinations.
• Updated NFT asset, media, and thumbnail requests to skip redirects.

How to test

• Verify NFT uploads and thumbnail generation still work for normal public URLs.
• Confirm unsafe or internal URLs are handled safely and rejected.

[github-actions]

k6 load testing comparison.
Base Commit Hash: 80d70f1
Target Commit Hash: ae23554

Metric	Base				Target				Diff
	Avg	Max	90	95	Avg	Max	90	95	Avg	Max	90	95
Nodes	951.18	36551.01	180.14	199.72	174.25	39347.66	87.86	91.99	-81.68% ✅	+7.65% 🔴	-51.23% ✅	-53.94% ✅
Mex	62.01	602.94	97.32	246.76	73.85	1898.78	161.79	236.43	+19.10% 🔴	+214.92% 🔴	+66.24% 🔴	-4.18% ✅
Accounts	63.02	730.59	92.87	255.75	72.36	688.64	144.36	235.90	+14.82% 🔴	-5.74% ✅	+55.45% 🔴	-7.76% ✅
Pool	62.95	616.65	99.05	247.28	73.11	1170.26	152.66	236.93	+16.15% 🔴	+89.78% 🔴	+54.13% 🔴	-4.18% ✅
Tokens	84.77	2144.47	107.93	116.64	98.64	1237.30	107.38	136.40	+16.36% 🔴	-42.30% ✅	-0.51% ✅	+16.95% 🔴
Transactions	575.62	36801.05	97.63	138.31	262.26	38966.69	151.64	158.38	-54.44% ✅	+5.88% 🔴	+55.31% 🔴	+14.51% 🔴
Blocks	82.45	659.77	138.39	338.49	95.57	1875.22	237.40	303.54	+15.91% 🔴	+184.22% 🔴	+71.55% 🔴	-10.32% ✅
Test Run Duration	60004.71				60002.67

Legend: Avg - Average Response Time, Max - Maximum Response Time, 90 - 90th Percentile, 95 - 95th Percentile
All times are in milliseconds.