fix(api): restrict /api/fetch to the hosts we actually fetch from - #513

Merged

joeyballentine merged 1 commit into

mainfrom

fix/ssrf-guard-api-fetch

Jul 31, 2026

Commits on Jul 31, 2026

fix(api): restrict /api/fetch to the hosts we actually fetch from

joeyballentine
and
claude
committed
a1353c3