Function validateFetchUrl

server/src/utils/url-security.ts:73–78

(url: URL)

 * Checks protocol, hostname, and DNS resolution.
 */
export async function validateFetchUrl(url: URL): Promise<void> {
  if (!['http:', 'https:'].includes(url.protocol)) {
    throw new Error('Only http and https URLs are supported');
  }
  await validateHostResolution(url.hostname);
}

/**
 * Validate a redirect target URL for SSRF safety.