[PrajwalTheCoder]

…S requests

• Implement connection-level IP pinning via custom PinnedAsyncNetworkBackend and SSRFProtectedTransport to resolve DNS rebinding / TOCTOU SSRF vulnerabilities.
• Preserve TLS Server Name Indication (SNI), certificate hostname verification, and HTTP Host header matching logical domain.
• Implement connect_safe_tls_socket for raw TLS certificate inspection with pinned destination address.
• Add hop-by-hop redirect revalidation, redirect loop detection, and cross-origin sensitive header stripping (Authorization, Cookie).
• Add strict response size limits (5MB) and zero-keepalive transport configuration to prevent connection-reuse poisoning and memory exhaustion.
• Enhance audit engine with RFC 7489 apex domain fallback for SPF and DMARC checks, and reject template dummy emails in email scraper.
• Add Level 1 unit & adversarial tests (test_ssrf_validator.py) and Level 2 real-socket integration tests (test_ssrf_real_network_integration.py) covering cert verification, SNI, Host headers, IPv4/IPv6, and response bounds.
• Include prospect deduplication query optimizations, audit batch query selectinload improvements, and AI model list deduplication.

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.