why can webfetch hit local addresses? this is unsafe. i can follow up privately if required but i don’t want to give exploit details in a public thread