1. GitHub Security Review: fetchViaProxy Function Exposes SSRF Risk via Unvalidated URL Input
A critical security review of a codebase has identified a Server-Side Request Forgery (SSRF) vulnerability within a core CORS proxy service. The `fetchViaProxy` function, located in `src/services/cors-proxy.ts`, accepts any user-supplied URL string and passes it directly to external proxy services without performing ba...