[3.0] Fixes broken SNI resolution without breaking the fetch guards - #9536

Closed

albertlast wants to merge 8 commits into

SimpleMachines:release-3.0from

albertlast:3.0/sni_fetch_safe_fixes

Commits on Aug 19, 2026

Always normalizes URLs in WebFetch APIs
Sesquipedalian
committed
f1a9485
Uses SMF\Url rather than strings in SMF\WebFetch\APIs\CurlFetcher
Sesquipedalian
committed
637bbb3
Implements SMF\Url::isFetchSafe() and SMF\Url::resolvesTo()
Sesquipedalian
committed
8288285
Double checks connected IP address in WebFetch APIs
Sesquipedalian
committed
c5ebb08
Simplifies checks in Url::proxied()
Sesquipedalian
committed
725b698
Fixes SMF\Url::isFetchSafe() so that it looks at this URL

albertlast
and
claude
committed
7152421
Restores the fetch guards, and pins curl to an address we vetted

albertlast
and
claude
committed
8a1de33
Keeps make_fetch_safe() around for 2.1 mods

albertlast
and
claude
committed
cba0846