package security import "context" // Config controls URL validation and SSRF checks. type Config struct { RequireHTTPS bool AllowedHosts []string AllowedPorts []int DNSResolveTimeout int } // Validator validates outbound callback URLs. type Validator interface { ValidateURL(ctx context.Context, target string) error }