Skip to content

URL Intelligence Agent v1.1.0 - Network Security Hardening

Choose a tag to compare

View all tags
@vpicciuolo vpicciuolo released this 08 Sep 04:30
· 29 commits to main since this release
v1.1.0
d277837

馃攼 URL Intelligence Agent v1.1.0

Major network-security hardening for arbitrary URL analysis.

v1.1.0 strengthens the URL Intelligence Agent network boundary with connect-time DNS validation and expanded SSRF protection while preserving normal public-web compatibility.

馃敟 What's new

DNS rebinding protection

The core safeFetch() pipeline now validates DNS not only before a request but also at the actual outbound socket connection.

This closes the DNS rebinding / TOCTOU gap where a hostname could theoretically resolve to a public IP during validation and later resolve to a private destination during connection.

Stronger SSRF protection

The network layer now uses CIDR-aware IPv4 and IPv6 classification.

Blocked destinations include:

  • loopback addresses
  • private networks
  • link-local addresses
  • cloud metadata ranges
  • reserved ranges
  • IPv4-mapped IPv6
  • NAT64 translation ranges
  • IPv6 transition/tunnel ranges
  • multicast and other non-public destinations

Mixed DNS responses containing both public and private addresses are rejected.

Redirect protection

Every redirect destination continues to be independently validated before it is followed.

Dedicated guarded network dispatcher

Untrusted URL collection now uses a dedicated Undici dispatcher with guarded DNS resolution.

The protection is scoped to URL Intelligence Agent network collection and does not modify Node.js global networking behavior.

馃И Testing

v1.1.0 adds regression coverage for:

  • IPv4 SSRF destinations
  • IPv6 SSRF destinations
  • mapped and translated addresses
  • mixed public/private DNS responses
  • reserved address classes

Tested successfully on:

  • Node.js 18
  • Node.js 20
  • Node.js 22

馃摎 Documentation

This release adds and updates:

  • SECURITY.md
  • docs/NETWORK_SECURITY.md
  • docs/ARCHITECTURE.md
  • docs/DEPLOYMENT.md
  • docs/ACTIONS.md
  • CHANGELOG.md

鈿欙笍 Runtime changes

  • Version bumped to 1.1.0
  • Minimum Node.js version: 18.17+
  • Added undici 6.x as a runtime dependency
  • User-agent versioning is now synchronized with the project version

馃 Hugging Face

The updated v1.1.0 runtime has also been deployed to the official Hugging Face Space.

Live Demo:
https://huggingface.co/spaces/vpicciuolo/url-intelligence-agent

Remote MCP:
https://vpicciuolo-url-intelligence-agent.hf.space/mcp

鈿狅笍 Renderer security boundary

The core HTTP collector is protected by the new connect-time DNS guard.

Optional Playwright/Chromium rendering operates through a separate browser networking boundary and should be deployed with infrastructure-level egress restrictions when enabled.

The public Hugging Face Space keeps optional browser rendering disabled by default.

Created by Vincenzo Picciuolo
HRN Innovation Technologies Ltd
Part of the HORNO Network ecosystem

GitHub:
https://github.com/vpicciuolo/url-intelligence-agent

Assets 2
Loading