Karim shoair e7f9adb40a feat(security): default follow_redirects to "safe" for SSRF protection ...

curl_cffi v0.15.0 introduced CurlFollow.SAFE, which follows redirects but rejects those targeting internal/private IPs (loopback, private networks, link-local). This is now the default for all HTTP fetchers, the MCP server, and the shell curl converter.

Added FollowRedirects type alias supporting all curl_cffi redirect
modes: bool, "safe", "all", "obeycode", "firstonly".

2026-04-05 18:41:50 +02:00

..

utils

feat: Change logger to be flexible enough for the spiders classes

2026-01-11 03:22:20 +02:00

__init__.py

Big structure changes (check commit description)

2024-11-03 01:04:02 +02:00

_shell_signatures.py

feat(security): default follow_redirects to "safe" for SSRF protection

2026-04-05 18:41:50 +02:00

_types.py

feat(security): default follow_redirects to "safe" for SSRF protection

2026-04-05 18:41:50 +02:00

ai.py

feat(security): default follow_redirects to "safe" for SSRF protection

2026-04-05 18:41:50 +02:00

custom_types.py

fix(Texthandler): Replace get_all with getall to match the Selector class

2026-03-17 21:53:17 +02:00

mixins.py

style: Fix all mypy errors and add type hints to untyped function bodies

2026-02-07 16:30:00 +02:00

shell.py

feat(security): default follow_redirects to "safe" for SSRF protection

2026-04-05 18:41:50 +02:00

storage.py

style: Fix all mypy errors and add type hints to untyped function bodies

2026-02-07 16:30:00 +02:00

translator.py

fix: remove forgotten unused code

2025-12-28 00:14:47 +02:00