#dns-rebinding

Streaming privacy for LLM apps: pii-leak-benchmark (does your gateway leak PII in streams?), chunk-invariance (one-line test for split-boundary leaks), mcp-ssrf-check, and a self-hosted redacting gateway.

Mitigate SSRF and DNS rebinding in reqwest by filtering DNS lookups, redirect targets, and URL literals through an IP / host ACL