fix(security): validate redirect targets in download functions to prevent SSRF bypass#13111

Merged

gr2m merged 2 commits intomainfrom

fix/ssrf-redirect-bypass

Mar 5, 2026

Commits on Mar 5, 2026

fix(security): validate redirect targets in download functions to prevent SSRF bypass

gr2m
and
claude
committed
fix(test): replace broken MSW mocks with direct fetch mocking in download tests

gr2m
and
claude
committed