callbacks service draft

api/edge/callbacks/internal/security/module.go

@@ -0,0 +1,16 @@
+package security
+
+import "context"
+
+// Config controls URL validation and SSRF checks.
+type Config struct {
+	RequireHTTPS      bool
+	AllowedHosts      []string
+	AllowedPorts      []int
+	DNSResolveTimeout int
+}
+
+// Validator validates outbound callback URLs.
+type Validator interface {
+	ValidateURL(ctx context.Context, target string) error
+}