Server-side request forgery vulnerability

Thanks for the response. I’ve sent a link to this thread back to the person who reported the issue (or feature as the case may be) to us.

Cheers,

DL