You should know about Server-Side Request Forgery

1
2

If you’re wondering, we’re using the smokescreen setup from this blog post for alert URLs.