[tedunangst]

I suppose there's some potential for SSRF abuse, although it's easy to argue the fault lies elsewhere.

[tptacek]

Right, and also internal CSRF is in fact an underrated vulnerability.