fix(ssrf): pin the socket to the validated IP (HTTP tier, #207 phase 1) - #402

Open

spartan8806 wants to merge 6 commits into

KnockOutEZ:mainfrom

spartan8806:fix/ssrf-pin-validated-ip

Commits on Aug 22, 2026

fix(ssrf): pin the socket to the validated IP (HTTP tier)

spartan8806
and
claude
committed
10a1622
docs: document the two functions this diff touches

spartan8806
and
claude
committed
e02edf1
fix(ssrf): fail closed when there is nothing to pin to

spartan8806
and
claude
committed
159ccba
fix(ssrf): scope the pinned dispatcher to a single redirect hop

spartan8806
and
claude
committed
f406923
fix(ssrf): release the response body on paths that abandon it

spartan8806
and
claude
committed
2850a5d
test: make the redirect-body test actually test the cancel

spartan8806
and
claude
committed
666906e