4 Commits

Author SHA1 Message Date
fdc66efe1b fix: disable auto-redirects and validate URLs to prevent SSRF (#3)
- Add _is_safe_url() checking for private/loopback/link-local/reserved IPs
- Block internal hostnames (.local, .internal, localhost, metadata.google.internal)
- Disable allow_redirects in requests.get()
- Validate redirect target before following single hop
- Raise RuntimeError on unsafe URL or redirect
2026-07-05 07:44:27 +00:00
3b0fea6379 4 hours instead of 2. Will expose a cli param for Max Run time later 2025-10-19 21:23:36 -05:00
687513725c Adding output dir as script input 2025-09-10 23:39:31 -05:00
41d7a6848e Downloader up and working 2025-09-10 23:27:33 -05:00