573 - Check URLs are valid before attempting to perform HTTP request - #578

Open

markfullmer wants to merge 11 commits into

php-embed:masterfrom

markfullmer:573-valid-url

Commits on Oct 1, 2026

Check URLs are valid before attempting to perform HTTP request
jmf3658
committed
35b7135
Simplify logic
jmf3658
committed
874d6cd
Fallback for empty types
jmf3658
committed
4bc547b

Commits on Oct 5, 2026

Revert allow-list logic for isHttp, retaining original support for relative URLs
jmf3658
committed
31aa303
Add FILTER_FLAG_GLOBAL_RANGE for PHP > 8.2
jmf3658
committed
3faf69e
Check for invalid URLs in Embed::get() and Embed::getMulti() and add minimal test coverage; full test converage for isInvalidUrl() already exists
jmf3658
committed
1bbcb91
Add URL checking after retrieving Redirect
jmf3658
committed
24661be
Replace CURLOPT_IPRESOLVE with manual CURLOPT_RESOLVE to avoid DNS rebinding; Add a getValidUrlIps() wrapper to return an array of valid IPs, relevant for URLs with redirects
jmf3658
committed
35c8560
Restrict CURLOPT_PROTOCOLS/CURLOPT_REDIR_PROTOCOLS to HTTP(S)
jmf3658
committed
d6f6915
Set CURLOPT_FOLLOWLOCATION to false to prevent internal redirects
jmf3658
committed
3550e83
Implement bounded HTTP Location handling for redirects
jmf3658
committed
0810bef