SSRF defense research and URL/DNS validation for Node.js, with reproducible case studies and socket-pinning adapters.