network

func NewSafeClient ¶

func NewSafeClient(allowPrivate bool) *http.Client

NewSafeClient returns an *http.Client with a 30-second timeout. When allowPrivate is false, connections to private/internal IP addresses are blocked to prevent SSRF attacks. DNS resolution results are used directly for dialing to prevent DNS rebinding.