KURI_ALLOW_PRIVATE

[thetrebor]

I made a very small change to optionally allow for private hosts. I'm using this with local development. I agree that it shouldn't be a default option. Would you like the pull request or should I just keep it a private fork? (the above message is 100% organic)

[justrach]

Yes please, I'd love the PR. 🙌

Gating it behind KURI_ALLOW_PRIVATE (default off, so the SSRF / private-host protection stays the default) is exactly the right call. Open it against main and I'll review.

Thanks for offering it upstream rather than keeping a fork.

[thetrebor]

feat: add KURI_ALLOW_PRIVATE env var to bypass SSRF private-IP block #174

submitted as PR 174 for your approval. thank you for providing this tool. It has solved a lot of problems. please note: this code was ai generated but human reviewed. Tests all passed on my computer.