Blocked server-side request forgery by validating outbound URLs for app logos and integrations