mirror of
https://github.com/CloakHQ/CloakBrowser.git
synced 2026-10-21 16:12:17 -05:00
Restrict Lambda handler to http/https URLs, block private/internal IPs, remove caller-controlled extra_args and wait_for_function, re-validate URL after navigation to catch redirect-based SSRF.