@BaranTeyin1 here is the fix which should hopefully cover about all the edge cases I could think of.

This pull request introduces a new validation rule for photo URLs, enhances configuration options for URL import security, and updates the application version. The most important changes include the addition of the PhotoUrlRule class for URL validation, updates to the FromUrlRequest rules to use this new validation rule, and the inclusion of database migrations for new configuration settings. Additionally, unit tests have been added to ensure the correctness of the new validation logic.

Validation Enhancements

• Added the PhotoUrlRule class to validate photo URLs, ensuring they are syntactically correct and comply with security restrictions such as requiring HTTPS, disallowing private IPs, and forbidding certain ports (app/Rules/PhotoUrlRule.php).
• Updated the FromUrlRequest rules to apply the PhotoUrlRule for validating individual URLs in the urls array (app/Http/Requests/Photo/FromUrlRequest.php). [1] [2]

Configuration Updates

• Introduced a new migration to add configurable options for URL import security, including settings to require HTTPS, disallow private IPs, forbid localhost, and restrict ports to 80/443 (database/migrations/2025_06_26_102340_parse_url_options.php).

Testing Improvements

• Added comprehensive unit tests for the PhotoUrlRule to validate various scenarios, such as invalid URLs, forbidden schemes, and restricted ports or IPs (tests/Unit/Rules/PhotoUrlRuleTest.php).

Version Update

• Updated the application version from 6.6.12 to 6.6.13 to reflect the new features and changes (version.md, database/migrations/2025_06_26_115949_bump_version060613.php). [1] [2]