GET a URL through the SSRF guard (a source URL is attacker-influenced data). The session goes only to the origins it is for, and is dropped on a cross-origin redirect.
GET a URL through the SSRF guard (a source URL is attacker-influenced data). The session goes only to the origins it is for, and is dropped on a cross-origin redirect.