Patch Changes
-
c66afc5: fix(security): validate redirect targets in download functions to prevent SSRF bypass
downloadnow validates the final URL after following HTTP redirects, preventing attackers from bypassing SSRF protections via open redirects to internal/private addresses.