Better IP Filter

Security

• Hardened webhook URL validation.
• Localhost and private literal IPv4 webhook targets are now blocked by default.
• Added webhook.allow-local-addresses for trusted local webhook relays.
• Sanitized denied log fields to prevent unsafe control characters in log output.
• Improved JSON escaping for webhook payloads.

Config

• Reworked config.yml comments to make proxy, failsafe, rate limit, logging, and webhook settings easier to understand.
• Added clearer safety notes for DENY_ALL, PROXY_GATE, denied logs, and webhook payloads.
• Added a warning when PROXY_GATE is enabled with an empty trusted proxy list.

Optimization

• Cached the global filtering enabled flag during config load instead of reading config on every login check.

Full Changelog: https://github.com/AREKKUZZERA/Better-IP-Filter/compare/1.4.2...1.4.3