nlcurl 0.14.0 → 0.15.0

package/README.md

@@ -21,6 +21,7 @@ For full API reference, configuration options, and advanced usage examples, plea
 - **HSTS (RFC 6797)** — Automatic `http://` to `https://` upgrading with `includeSubDomains` support and configurable preload lists.
 - **DNS-over-HTTPS (RFC 8484)** — Wire-format DoH with GET/POST methods, EDNS(0) with padding (RFC 6891/7830), bootstrap resolution, and integrated DNS caching.
 - **HTTPS Resource Records (RFC 9460)** — SVCB/HTTPS DNS record resolution for ALPN hints, ECH config delivery, and address hints.
+- **SSRF Protection** — Optional private/reserved IP and dangerous-port blocking, including redirect validation and DNS-resolved address filtering.
 - **Proxy Support** — HTTP CONNECT tunneling, HTTPS proxies, SOCKS4/4a, and SOCKS5 with optional username/password authentication. Environment variable resolution (`HTTP_PROXY`, `HTTPS_PROXY`, `NO_PROXY`).
 - **WebSocket (RFC 6455)** — Full WebSocket client with TLS fingerprinting, per-message deflate compression (RFC 7692), control frame validation (≤125 bytes), ping/pong, and binary/text framing.
 - **Server-Sent Events** — W3C EventSource-compliant SSE parser with streaming async generator interface, UTF-8 BOM stripping, and cross-chunk CRLF handling.
@@ -28,7 +29,7 @@ For full API reference, configuration options, and advanced usage examples, plea
 - **Retry with Backoff** — Configurable automatic retry with linear or exponential backoff, jitter, `Retry-After` header respect, and custom retry predicates.
 - **Rate Limiting** — Token-bucket rate limiter with configurable request quotas and automatic queuing.
 - **Request Body Compression** — Outgoing body compression with gzip, deflate, and Brotli.
-- **Response Decompression** — Automatic decompression of gzip, deflate, Brotli, and zstd (Node.js 20.10+) with multi-layer encoding support.
+- **Response Decompression** — Automatic decompression of gzip, deflate, Brotli, and zstd (Node.js 20.10+) with multi-layer encoding support, ratio checks, and buffered output limits.
 - **Happy Eyeballs v2 (RFC 8305)** — Dual-stack connection racing with 250ms stagger for optimal latency.
 - **Alt-Svc (RFC 7838)** — HTTP Alternative Services tracking with automatic protocol upgrade preference.
 - **FormData (RFC 7578)** — Multipart form-data encoding with file upload support.
@@ -183,4 +184,4 @@ NLcURL implements or references the following RFCs and standards:
 
 ## License
 
-MIT
+MIT

package/dist/cookies/psl-data.d.ts

@@ -3,8 +3,8 @@
  *
  * Complete Mozilla Public Suffix List rules.
  * Generated from: https://publicsuffix.org/list/public_suffix_list.dat
- * Generated on:   2026-04-08T11:56:17.056Z
- * Total rules:    10161
+ * Generated on:   2026-07-06T00:27:22.467Z
+ * Total rules:    10228
  *
  * To regenerate: npx tsx scripts/update-psl.ts
  */

package/dist/cookies/psl-data.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"psl-data.d.ts","sourceRoot":"","sources":["../../src/cookies/psl-data.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,eAAO,MAAM,SAAS,EAAE,SAAS,MAAM,EAk7TtC,CAAC"}
+{"version":3,"file":"psl-data.d.ts","sourceRoot":"","sources":["../../src/cookies/psl-data.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,eAAO,MAAM,SAAS,EAAE,SAAS,MAAM,EAq/TtC,CAAC"}

package/dist/cookies/psl-data.js

@@ -3,8 +3,8 @@
  *
  * Complete Mozilla Public Suffix List rules.
  * Generated from: https://publicsuffix.org/list/public_suffix_list.dat
- * Generated on:   2026-04-08T11:56:17.056Z
- * Total rules:    10161
+ * Generated on:   2026-07-06T00:27:22.467Z
+ * Total rules:    10228
  *
  * To regenerate: npx tsx scripts/update-psl.ts
  */
@@ -1093,6 +1093,7 @@ export const PSL_RULES = [
     "video.hu",
     "id",
     "ac.id",
+    "ai.id",
     "biz.id",
     "co.id",
     "desa.id",
@@ -5501,8 +5502,6 @@ export const PSL_RULES = [
     "lib.mt.us",
     "cc.nc.us",
     "lib.nc.us",
-    "cc.nd.us",
-    "lib.nd.us",
     "cc.ne.us",
     "lib.ne.us",
     "cc.nh.us",
@@ -7854,6 +7853,7 @@ export const PSL_RULES = [
     "eero-stage.online",
     "opentunnel.xyz",
     "antagonist.cloud",
+    "claude.app",
     "apigee.io",
     "panel.dev",
     "siiites.com",
@@ -7890,6 +7890,9 @@ export const PSL_RULES = [
     "potager.org",
     "sweetpepper.org",
     "myasustor.com",
+    "*.atlassian-3p.com",
+    "*.atlassian-3p-us-gov-mod.com",
+    "*.atlassian-isolated-3p.com",
     "cdn.prod.atlassian-dev.net",
     "myfritz.link",
     "myfritz.net",
@@ -7949,10 +7952,12 @@ export const PSL_RULES = [
     "cafjs.com",
     "canva-apps.cn",
     "my.canvasite.cn",
+    "khsj.cn",
     "canva-apps.com",
     "canva-hosted-embed.com",
     "canvacode.com",
     "rice-labs.com",
+    "canva.link",
     "canva.run",
     "my.canva.site",
     "drr.ac",
@@ -8094,7 +8099,6 @@ export const PSL_RULES = [
     "static-access.net",
     "craft.me",
     "realm.cz",
-    "on.crisp.email",
     "*.cryptonomic.net",
     "cfolks.pl",
     "cyon.link",
@@ -8132,6 +8136,9 @@ export const PSL_RULES = [
     "deno-staging.dev",
     "deno.net",
     "sandbox.deno.net",
+    "deployagent.com",
+    "piebox.site",
+    "deployagent.space",
     "dedyn.io",
     "deta.app",
     "deta.dev",
@@ -8170,7 +8177,20 @@ export const PSL_RULES = [
     "cc.cd",
     "us.ci",
     "de5.net",
+    "dnshome.at",
+    "resolve.bar",
+    "ddns.berlin",
+    "dnshome.cloud",
+    "ddnssec.de",
     "dnshome.de",
+    "dyndnssec.de",
+    "heimdns.de",
+    "srvdns.de",
+    "dnshome.eu",
+    "dnshome.it",
+    "dyn.now",
+    "heimdns.online",
+    "ddns.wtf",
     "online.th",
     "shop.th",
     "co.scot",
@@ -8586,6 +8606,7 @@ export const PSL_RULES = [
     "staging.expo.app",
     "on.staging.expo.app",
     "onfabrica.com",
+    "fspages.org",
     "ru.net",
     "adygeya.ru",
     "bashkiria.ru",
@@ -8877,6 +8898,7 @@ export const PSL_RULES = [
     "whitesnow.jp",
     "zombie.jp",
     "heteml.net",
+    "vibehost.space",
     "graphic.design",
     "goip.de",
     "*.hosted.app",
@@ -8900,8 +8922,6 @@ export const PSL_RULES = [
     "cloudfunctions.net",
     "goupile.fr",
     "pymnt.uk",
-    "cloudapps.digital",
-    "london.cloudapps.digital",
     "gov.nl",
     "grafana-dev.net",
     "grayjayleagues.com",
@@ -8957,6 +8977,7 @@ export const PSL_RULES = [
     "ltd.ng",
     "ngo.ng",
     "plc.ng",
+    "hstgr.cloud",
     "hostyhosting.io",
     "hf.space",
     "static.hf.space",
@@ -9130,6 +9151,15 @@ export const PSL_RULES = [
     "webadorsite.com",
     "jouwweb.site",
     "js.org",
+    "elastic.k2.cloud",
+    "lb.ru-msk.k2.cloud",
+    "s3.ru-msk.k2.cloud",
+    "website.ru-msk.k2.cloud",
+    "lb.ru-spb.k2.cloud",
+    "s3.ru-spb.k2.cloud",
+    "website.ru-spb.k2.cloud",
+    "s3.k2.cloud",
+    "website.k2.cloud",
     "kaas.gg",
     "khplay.nl",
     "kapsi.fi",
@@ -9256,7 +9286,6 @@ export const PSL_RULES = [
     "mwcloudnonprod.com",
     "polyspace.com",
     "mayfirst.info",
-    "mayfirst.org",
     "mcdir.me",
     "mcdir.ru",
     "vps.mcdir.ru",
@@ -9270,6 +9299,7 @@ export const PSL_RULES = [
     "messerli.app",
     "atmeta.com",
     "apps.fbsbx.com",
+    "*.metaaiusercontent.com",
     "*.cloud.metacentrum.cz",
     "custom.metacentrum.cz",
     "flt.cloud.muni.cz",
@@ -9325,6 +9355,7 @@ export const PSL_RULES = [
     "mittwaldserver.info",
     "typo3server.info",
     "project.space",
+    "mkm.fan",
     "mocha.app",
     "mochausercontent.com",
     "mocha-sandbox.dev",
@@ -9468,6 +9499,31 @@ export const PSL_RULES = [
     "*.code.run",
     "*.database.run",
     "*.migration.run",
+    "aberdeen.wa.us",
+    "bainbridge-isl.wa.us",
+    "bellevue.wa.us",
+    "bremerton.wa.us",
+    "centralia.wa.us",
+    "chehalis.wa.us",
+    "forks.wa.us",
+    "gig-harbor.wa.us",
+    "hoquiam.wa.us",
+    "keyport.wa.us",
+    "kingston.wa.us",
+    "olympia.wa.us",
+    "port-angeles.wa.us",
+    "port-ludlow.wa.us",
+    "port-orchard.wa.us",
+    "port-townsend.wa.us",
+    "poulsbo.wa.us",
+    "redmond.wa.us",
+    "renton.wa.us",
+    "sea.wa.us",
+    "seattle.wa.us",
+    "sequim.wa.us",
+    "shelton.wa.us",
+    "silverdale.wa.us",
+    "yarrow-point.wa.us",
     "noticeable.news",
     "notion.site",
     "dnsking.ch",
@@ -9522,6 +9578,7 @@ export const PSL_RULES = [
     "is-local.org",
     "opensocial.site",
     "*.oaiusercontent.com",
+    "chatgpt.site",
     "opencraft.hosting",
     "16-b.it",
     "32-b.it",
@@ -9548,7 +9605,6 @@ export const PSL_RULES = [
     "ox.rs",
     "oy.lc",
     "pgfog.com",
-    "pagexl.com",
     "gotpantheon.com",
     "pantheonsite.io",
     "*.paywhirl.com",
@@ -9597,6 +9653,9 @@ export const PSL_RULES = [
     "nyc.mn",
     "*.cn.st",
     "pubtls.org",
+    "puter.app",
+    "puter.site",
+    "puter.work",
     "pythonanywhere.com",
     "eu.pythonanywhere.com",
     "qa2.com",
@@ -9848,6 +9907,9 @@ export const PSL_RULES = [
     "co.ua",
     "pp.ua",
     "as.sh.cn",
+    "vicp.fun",
+    "yicp.fun",
+    "zicp.fun",
     "sheezy.games",
     "myshopblocks.com",
     "myshopify.com",
@@ -10017,6 +10079,8 @@ export const PSL_RULES = [
     "cust.testing.thingdust.io",
     "reservd.testing.thingdust.io",
     "tickets.io",
+    "t3.storage.dev",
+    "t3.storageapi.dev",
     "arvo.network",
     "azimuth.network",
     "tlon.network",
@@ -10085,6 +10149,8 @@ export const PSL_RULES = [
     "v-info.info",
     "vistablog.ir",
     "deus-canvas.com",
+    "vivenushop.com",
+    "vivenushop.dev",
     "voorloper.cloud",
     "*.vultrobjects.com",
     "wafflecell.com",
@@ -10093,10 +10159,9 @@ export const PSL_RULES = [
     "webflow.io",
     "webflowtest.io",
     "*.webhare.dev",
-    "bookonline.app",
     "hotelwithflight.com",
-    "reserve-online.com",
     "reserve-online.net",
+    "book.online",
     "cprapid.com",
     "pleskns.com",
     "wp2.host",
@@ -10164,6 +10229,8 @@ export const PSL_RULES = [
     "zap.cloud",
     "zeabur.app",
     "*.zerops.app",
+    "prg1-zerops.zone",
+    "*.zerops.zone",
     "bss.design",
     "basicserver.io",
     "virtualserver.io",