Help developers constrain a fetch tool that follows URLs supplied by untrusted documents. Evaluate the scheme, host, resolved address and each redirect, then connect using the validated destination under explicit size and time limits. Export a local egress adapter and loopback cases that reveal redirect and address-policy mistakes.
Proposed milestones
- Parse destinations and define address policies
- Bind resolution decisions to actual connections
- Revalidate redirects and bound responses
- Export an adapter and replay denied requests
This is an upstream project brief; an implementation and completion tests are not supplied.