Safehttp – An SSRF-resistant HTTP client for Go

Safehttp, an open-source Go HTTP client by Ayuhito, is a drop-in replacement for net/http that adds SSRF protection by default. It blocks private, loopback, and special-purpose destinations, re-checks every redirect and the address of each new connection against DNS rebinding, disables proxies, and rejects mismatched Host header overrides.