Rifqi Akram 5b1e56407b Add SSRF-guarded web fetch agent tool ...

* feat(web-fetch): add web_fetch tool to read a specific URL's content

* test(web-fetch): add SSRF coverage and fail closed on empty DNS resolution

Add explicit SSRF regression tests for the web_fetch path covering
loopback, private LAN ranges, link-local/metadata, IPv6 private/local,
redirect-into-private, and unsupported schemes. Harden _public_http_url
to fail closed when a hostname resolves to no addresses.

2026-06-01 16:57:28 +09:00

21 KiB

Raw Blame History

View Raw