server: use atproto-labs safe fetch to avoid SSRF

server/deno.json

···
     "@atcute/client": "npm:@atcute/client@^4.0.3",
     "@atcute/lex-cli": "npm:@atcute/lex-cli@^2.2.0",
     "@atcute/lexicons": "npm:@atcute/lexicons@^1.1.1",
+    "@atproto-labs/fetch-node": "npm:@atproto-labs/fetch-node@^0.1.10",
     "@libsql/client": "npm:@libsql/client@^0.15.15",
     "drizzle-kit": "npm:drizzle-kit@^0.31.5",
     "drizzle-orm": "npm:drizzle-orm@^0.44.6"

server/deno.lock

···
     "npm:@atcute/identity-resolver@^1.1.3": "1.1.3_@atcute+identity@1.1.0",
     "npm:@atcute/lex-cli@^2.2.0": "2.2.0_@badrap+valita@0.4.6",
     "npm:@atcute/lexicons@^1.1.1": "1.1.1",
+    "npm:@atproto-labs/fetch-node@~0.1.10": "0.1.10",
     "npm:@libsql/client@~0.15.15": "0.15.15",
     "npm:drizzle-kit@*": "0.31.5_esbuild@0.25.10",
     "npm:drizzle-kit@~0.31.5": "0.31.5_esbuild@0.25.10",
···
       "dependencies": [
         "@badrap/valita"
       ]
+    },
+    "@atproto-labs/fetch-node@0.1.10": {
+      "integrity": "sha512-o7hGaonA71A6p7O107VhM6UBUN/g9tTyYohMp1q0Kf6xQ4npnuZYRSHSf2g6reSfGQJ1GoFNjBObETTT1ge/jQ==",
+      "dependencies": [
+        "@atproto-labs/fetch",
+        "@atproto-labs/pipe",
+        "ipaddr.js",
+        "undici"
+      ]
+    },
+    "@atproto-labs/fetch@0.2.3": {
+      "integrity": "sha512-NZtbJOCbxKUFRFKMpamT38PUQMY0hX0p7TG5AEYOPhZKZEP7dHZ1K2s1aB8MdVH0qxmqX7nQleNrrvLf09Zfdw==",
+      "dependencies": [
+        "@atproto-labs/pipe"
+      ]
+    },
+    "@atproto-labs/pipe@0.1.1": {
+      "integrity": "sha512-hdNw2oUs2B6BN1lp+32pF7cp8EMKuIN5Qok2Vvv/aOpG/3tNSJ9YkvfI0k6Zd188LeDDYRUpYpxcoFIcGH/FNg=="
     },
     "@badrap/valita@0.4.6": {
       "integrity": "sha512-4kdqcjyxo/8RQ8ayjms47HCWZIF5981oE5nIenbfThKDxWXtEHKipAOWlflpPJzZx9y/JWYQkp18Awr7VuepFg=="
···
         "resolve-pkg-maps"
       ]
     },
+    "ipaddr.js@2.2.0": {
+      "integrity": "sha512-Ag3wB2o37wslZS19hZqorUnrnzSkpOVy+IiiDEiTqNubEYpYuHWIf6K4psgN2ZWKExS4xhVCrRVfb/wfW8fWJA=="
+    },
     "js-base64@3.7.8": {
       "integrity": "sha512-hNngCeKxIUQiEUN3GPJOkz4wF/YvdUdbNL9hsBcMQTkKzboD7T/q3OYOuuPZLUE6dBxSGpwhk5mwuDud7JVAow=="
     },
···
     "undici-types@7.10.0": {
       "integrity": "sha512-t5Fy/nfn+14LuOc2KNYg75vZqClpAiqscVvMygNnlsHBFpSXdJaYtXMcdNLpl/Qvc3P2cB3s6lOV51nqsFq4ag=="
     },
+    "undici@6.22.0": {
+      "integrity": "sha512-hU/10obOIu62MGYjdskASR3CUAiYaFTtC9Pa6vHyf//mAipSvSQg6od2CnJswq7fvzNS3zJhxoRkgNVaHurWKw=="
+    },
     "web-streams-polyfill@3.3.3": {
       "integrity": "sha512-d2JWLCivmZYTSIoge9MsgFCZrt571BikcWGYkjC1khllbTeDlGqZ2D8vD8E/lJa8WGWbb7Plm8/XJYV7IJHZZw=="
     },
···
       "npm:@atcute/identity-resolver@^1.1.3",
       "npm:@atcute/lex-cli@^2.2.0",
       "npm:@atcute/lexicons@^1.1.1",
+      "npm:@atproto-labs/fetch-node@~0.1.10",
       "npm:@libsql/client@~0.15.15",
       "npm:drizzle-kit@~0.31.5",
       "npm:drizzle-orm@~0.44.6"

server/src/backfill/blob.ts

···
-import { Client, simpleFetchHandler } from "@atcute/client";
-import { getPds, MAX_SITE_SIZE } from "../utils.ts";
+import { Client } from "@atcute/client";
+import { fetchHandler, getPds, MAX_SITE_SIZE } from "../utils.ts";
 
 export default async function (
   did: `did:${"plc" | "web"}:${string}`,
···
   if (!pds) throw "PDS not found";
 
   const { data, ok } = await new Client({
-    handler: simpleFetchHandler({ service: pds }),
+    handler: fetchHandler({ service: pds }),
   }).get("com.atproto.sync.getBlob", {
     params: {
       did,

server/src/backfill/new-records.ts

···
-import { db, getPds, isDid, rkeyToUrl } from "../utils.ts";
+import { db, getPds, isDid, rkeyToUrl, fetchHandler } from "../utils.ts";
 import { decodeFirst } from "@atcute/cbor";
 import { DevAtcitiesRoute } from "../lexicons/index.ts";
 import { is } from "@atcute/lexicons";
 import { ComAtprotoSyncSubscribeRepos } from "@atcute/atproto";
-import { Client, simpleFetchHandler } from "@atcute/client";
+import { Client } from "@atcute/client";
 import { routes } from "../db/schema.ts";
 import { and, eq } from "drizzle-orm";
 
···
           }
 
           const client = new Client({
-            handler: simpleFetchHandler({
+            handler: fetchHandler({
               service: pds,
             }),
           });

server/src/backfill/old-records.ts

···
-import { Client, simpleFetchHandler } from "@atcute/client";
-import { db, getPds, isDid, rkeyToUrl } from "../utils.ts";
+import { Client } from "@atcute/client";
+import { db, fetchHandler, getPds, isDid, rkeyToUrl } from "../utils.ts";
 import { is } from "@atcute/lexicons";
 import { DevAtcitiesRoute } from "../lexicons/index.ts";
 import { routes } from "../db/schema.ts";
···
   const pds = await getPds(did);
   if (!pds) return console.error(did, "could not be resolved to a pds.");
   const pdsClient = new Client({
-    handler: simpleFetchHandler({ service: pds }),
+    handler: fetchHandler({ service: pds }),
   });
 
   let cursor: string | undefined;
···
 
 export default async function (db: db) {
   const relay = new Client({
-    handler: simpleFetchHandler({
+    handler: fetchHandler({
       service:
         Deno.env.get("ATPROTO_RELAY") ||
         (() => {

server/src/utils.ts

···
   PlcDidDocumentResolver,
   WebDidDocumentResolver,
 } from "@atcute/identity-resolver";
+import { FetchHandler, SimpleFetchHandlerOptions } from "@atcute/client";
+import { safeFetchWrap } from "@atproto-labs/fetch-node";
 
 export type db = LibSQLDatabase<typeof schema> & {
   $client: Client;
···
     web: new WebDidDocumentResolver(),
   },
 });
+
+export const fetchHandler: ({
+  service,
+}: SimpleFetchHandlerOptions) => FetchHandler = ({
+  service,
+}: SimpleFetchHandlerOptions): FetchHandler => {
+  const safeFetch = safeFetchWrap();
+  return async (pathname, init) => {
+    const url = new URL(pathname, service);
+    return await safeFetch(url, init);
+  };
+};
 
 export async function getPds(
   did: `did:${"plc" | "web"}:${string}`