SSRF Hardening in Node: Block Metadata and DNS Rebinding on Fetches

1) Attacker URL: http://evil.example/img  → resolves to 1.2.3.4 (public)  ✅ passes check
2) TTL expires / rebind → 169.254.169.254 at connect time               ❌ SSRF

// ✅ Pin address after resolution (sketch)
import dns from "node:dns/promises";
import net from "node:net";
import { Agent, fetch } from "undici";

const BLOCK = [
  /^127\./, /^10\./, /^172\.(1[6-9]|2\d|3[0-1])\./, /^192\.168\./,
  /^169\.254\./, /^0\./, /^100\.64\./, /^::1$/, /^fc00:/i, /^fe80:/i,
];

function isBlockedIp(ip: string): boolean {
  return BLOCK.some((re) => re.test(ip));
}

export async function safeFetch(userUrl: string): Promise<Response> {
  const u = new URL(userUrl);
  if (!["http:", "https:"].includes(u.protocol)) throw new Error("scheme");
  const { address, family } = await dns.lookup(u.hostname, { verbatim: true });
  if (isBlockedIp(address)) throw new Error("ssrf_blocked");

  // Connect to pinned IP; send original Host
  const pinned = family === 6 ? `http://[${address}]${u.pathname}${u.search}`
                              : `http://${address}${u.pathname}${u.search}`;
  const httpsUrl = u.protocol === "https:"
    ? pinned.replace("http://", "https://")
    : pinned;

  return fetch(httpsUrl, {
    method: "GET",
    redirect: "manual", // ✅ inspect Location yourself
    headers: { Host: u.host },
    dispatcher: new Agent({ connect: { timeout: 2000 } }),
  });
}

// ❌ Trusting only URL.hostname string checks
if (userUrl.includes("169.254.169.254")) throw new Error("no");
await fetch(userUrl); // rebinding / DNS / redirects still bite