feat: implement shady-url detection for local IPs and localhost (#449)

[7amed3li]

Description

This PR implements the detection of local IP addresses (both IPv4 and IPv6) and localhost hostnames within URLs, as requested in issue #449. This is handled by a new warning type shady-url with Information severity to distinguish it from external shady-link warnings.

Changes

• Core Logic: Updated ShadyURL class to identify private IP ranges and localhost.
• IPv6 Fix: Fixed a bug where IPv6 hostnames extracted from URL objects (e.g., [::1]) retained their square brackets, causing ipaddr.js validation to fail.
• Warning System: Added shady-url to warnings.ts with its localized key and Information severity.
• Probe Integration: Modified isLiteral probe to differentiate between shady-link and shady-url based on the detection result.
• Documentation: Added a new documentation file docs/shady-url.md explaining the risks (SSRF, Data Exfiltration, Environment Spillage).
• Changeset: Included a changeset for a minor version bump.

Verification Results

I have added and updated unit tests in ShadyURL.spec.ts and isLiteral.spec.ts. All 78 tests passed successfully on Windows using tsx.

npx tsx --test workspaces/js-x-ray/test/ShadyURL.spec.ts workspaces/js-x-ray/test/probes/isLiteral.spec.ts  
Total tests: 78
Passing: 78
Failing: 0

[changeset-bot]

🦋 Changeset detected

Latest commit: 16cdffa

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package

Name	Type
@nodesecure/js-x-ray	Minor

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

[7amed3li]

Hi maintainers 👋
This PR is ready from my side.
Please let me know if you’d like me to make any changes or adjustments.
Thanks for your time!

[fraxken]

In the issue by throwing a shady-url warning I wanted shady-link (not a new warning that achieve the same purpose ^^).

[7amed3li]

Updated based on feedback

[fraxken]

Not sure why some of the tests are been deleted (please review the diff)

[fraxken]

??

[7amed3li]

Hi @fraxken 👋

Thank you very much for the review and for taking the time to guide me through the changes — I really appreciate it.

This is my first pull request to this project (and one of my first OSS contributions), so I apologize for the earlier mistakes and any confusion caused along the way. Your feedback helped me understand the project conventions much better.

Thanks again for your patience and clear explanations — they were extremely helpful 🙏
Please let me know if there’s anything else you’d like me to adjust.