From 4a6cc3cacb234cc1f8d39946d8276c5391835f54 Mon Sep 17 00:00:00 2001
From: David Roetzel <david@roetzel.de>
Date: Fri, 31 Jul 2026 12:36:06 +0200
Subject: [PATCH 1/2] Require `Request` late

So users of this engine can enable httpx's webmock integration
before httpx is first initialised.
---
 fasp_base/lib/fasp_base.rb        | 1 -
 fasp_base/lib/fasp_base/engine.rb | 7 +++++++
 2 files changed, 7 insertions(+), 1 deletion(-)

diff --git a/fasp_base/lib/fasp_base.rb b/fasp_base/lib/fasp_base.rb
index 7ca174a..92e6336 100644
--- a/fasp_base/lib/fasp_base.rb
+++ b/fasp_base/lib/fasp_base.rb
@@ -4,7 +4,6 @@
 require "fasp_base/linzer/adapter/action_dispatch/response"
 require "fasp_base/linzer/adapter/httpx/request"
 require "fasp_base/linzer/adapter/httpx/response"
-require "fasp_base/request"
 
 module FaspBase
   class Error < ::StandardError ; end
diff --git a/fasp_base/lib/fasp_base/engine.rb b/fasp_base/lib/fasp_base/engine.rb
index b950b77..0e9018c 100644
--- a/fasp_base/lib/fasp_base/engine.rb
+++ b/fasp_base/lib/fasp_base/engine.rb
@@ -5,5 +5,12 @@
 module FaspBase
   class Engine < ::Rails::Engine
     isolate_namespace FaspBase
+
+    # Require `Request` late in the boot process
+    # to enable users to install httpx's webmock
+    # integration before httpx is initialized.
+    initializer "fasp_base.require_request" do
+      require "fasp_base/request"
+    end
   end
 end

From dac89c90072586c44c001335f7b2657cf75fe300 Mon Sep 17 00:00:00 2001
From: David Roetzel <david@roetzel.de>
Date: Fri, 31 Jul 2026 12:37:20 +0200
Subject: [PATCH 2/2] Disable SSRF protection in `development` env

So things can be tested against services running locally.
---
 fasp_base/lib/fasp_base/request.rb | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/fasp_base/lib/fasp_base/request.rb b/fasp_base/lib/fasp_base/request.rb
index 1e8cbff..092c471 100644
--- a/fasp_base/lib/fasp_base/request.rb
+++ b/fasp_base/lib/fasp_base/request.rb
@@ -1,5 +1,5 @@
 class FaspBase::Request
-  HTTPX = ::HTTPX.plugin(:ssrf_filter)
+  HTTPX = ::HTTPX.plugin(:ssrf_filter) unless Rails.env.development?
 
   def initialize(server)
     @server = server