fix(net): harden the loopback transport guard across all HTTP clients#804

Open

benw5483 wants to merge 2 commits into

mainfrom

oauth-exact-loopback-guard

Commits on Jul 6, 2026

fix(auth): match loopback hosts exactly in the HTTPS transport guard

benw5483
and
Actual Factory Bot
committed
refactor(net): route all HTTP clients through one hardened loopback guard

benw5483
and
Actual Factory Bot
committed