3 Commits

Include renames

Author	SHA1	Message	Date
ik	39f66481be	R11: Validate URL host before network I/O — prevent SSRF ... - Add _validate_url_host() to check allowlist before urlopen() - Validate both original URL and redirect target - Reject localhost, internal IPs, and non-allowlisted hosts - Add 2 unit tests for disallowed host rejection - Prevents SSRF attacks via malicious source URLs	2026-09-10 05:45:57 +07:00
ik	486b4e9645	fix: enforce community cooldown per site	2026-09-08 16:32:42 +07:00
ik	3f468799bd	feat: enforce community source cooldown	2026-09-05 07:52:37 +07:00