You should know about Server-Side Request Forgery

If you’re wondering, we’re using the smokescreen setup from this blog post for alert URLs.