Fix WebKit timestamp schema handling

# Conflicts:
#	src/mvt/android/cli.py

docs/iocs.md

@@ -34,25 +34,6 @@ It is also possible to load STIX2 files automatically from the environment varia
 export MVT_STIX2="/home/user/IOC1.stix2:/home/user/IOC2.stix2"
 ```
 
-## Network Access
-
-When checking URL indicators, MVT follows recognized shortened URLs with an
-HTTP `HEAD` request. The following environment variables control these
-requests:
-
-- `MVT_NETWORK_ACCESS_ALLOWED` enables or disables network requests. It defaults
-  to `true`. Set it to `false` to prevent MVT from attempting to resolve
-  shortened URLs.
-- `MVT_NETWORK_TIMEOUT` sets the request timeout in seconds. It defaults to
-  `15`.
-
-For example, to run IOC checks without resolving shortened URLs:
-
-```bash
-MVT_NETWORK_ACCESS_ALLOWED=false mvt-ios check-iocs \
-    --iocs ~/iocs/malware.stix2 /path/to/iphone/output/
-```
-
 ## STIX2 Support
 
 So far MVT implements only a subset of [STIX2 specifications](https://docs.oasis-open.org/cti/stix/v2.1/csprd01/stix-v2.1-csprd01.html):
@@ -74,3 +55,4 @@ You can automaticallly download the latest public indicator files with the comma
 Please [open an issue](https://github.com/mvt-project/mvt/issues/) to suggest new sources of STIX-formatted IOCs.
 
 
+

src/mvt/common/url.py

@@ -3,16 +3,11 @@
 # Use of this software is governed by the MVT License 1.1 that can be found at
 #   https://license.mvt.re/1.1/
 
-import logging
 from typing import Optional
 
 import requests
 from tld import get_tld
 
-from .config import settings
-
-log = logging.getLogger(__name__)
-
 SHORTENER_DOMAINS = [
     "0rz.tw",
     "1drv.ms",
@@ -380,16 +375,7 @@ class URL:
 
     def unshorten(self) -> Optional[str]:
         """Unshorten the URL by requesting an HTTP HEAD response."""
-
-        if settings.NETWORK_ACCESS_ALLOWED is False:
-            log.info(
-                "Network access disabled (MVT_NETWORK_ACCESS_ALLOWED=False), "
-                "skipping unshorten for %s",
-                self.url,
-            )
-            return ""
-
-        res = requests.head(self.url, timeout=settings.NETWORK_TIMEOUT)
+        res = requests.head(self.url)
         if str(res.status_code).startswith("30"):
             return res.headers["Location"]