Collector SSRF Protection: Why Shouldn’t You Request Customer-Registered URLs As-Is?
These controls prevent user-provided addresses from directing requests to internal services or networks that are not allowed. Even an address that looks legitimate can reach an internal address after a redirect or name resolution. Opening network boundaries for analytical convenience undermines trust across the entire tenant.