secure-fetch-ssrf

The security contract for this server — SSRF, DNS rebinding, redirect, and encoding defenses with the full threat matrix and checklist. Use whenever touching URL handling, DNS resolution, the HTTP client, redirects, or the security/ module.