MHSanaei ede275e4dc fix(server): apply the outbound address policy to remote cert pinning ...

The remote certificate fetch now dials through the same netsafe guard
as the REALITY target scan. A private or loopback endpoint is refused
unless the request carries allowPrivate; the inbound form asks the
operator to confirm and retries with the opt-in.

2026-10-03 13:20:00 +02:00

489 KiB

Raw Blame History