- ✏️ doc updates
- 🐛 when fixing a bug
- 🚀 when making general improvements
- ✅ when adding tests
- ⬆️ when upgrading dependencies
- 🎉 when adding new features
- 🎉 Add a default 20s request
timeouttofetch, applied across all redirect hops and combinable with a caller-suppliedsignal
- 🚀 Add Type Coercion to TypedResponse to allow for more flexible response handling
- 🚀 Resolve DNS names of allow list if blocked by SSRF checks, allowing them to bypass the checks
- 🚀 Add verbose option to type response
- 🚀 Add allow list to allow specific URLs or IPs to bypass SSRF checks
- 🚀 Expose a
fetchwrapper that integratesisSafeUrl()checks to prevent SSRF vulnerabilities in HTTP requests
- 🚀 Implement Type Safe fetch wrapper to prevent SSRF vulnerabilities in HTTP requests
- 🐛 Fix types path for built output
- 🎉 Initial release — SSRF-safe URL validation library
- 🎉
isSafeUrl()— validates URLs against SSRF attacks (private IPs, blocked protocols, DNS rebinding) - 🎉
isPrivateIPv4()/isPrivateIPv6()— check if an IP falls in private/special-purpose ranges - 🎉 Uses
@microsoft/antissrffor maintained block lists