AntiSSRFPolicy Properties

Property Description
AddXFFHeader Determines whether to automatically add the X-Forwarded-For header to outgoing requests that don’t already include it.
AllowedAddresses List of IP networks that are explicitly allowed by the policy.
AllowPlainTextHttp Determines whether HTTPS is required or HTTP is allowed.
DeniedAddresses List of IP networks that are explicitly blocked by the policy.
DeniedHeaders List of headers that are forbidden from being included in outgoing requests.
DenyAllUnspecifiedIPs Determines whether all IP addresses should be blocked by default or only deniedAddresses should be blocked.
RequiredHeaders List of headers that are required to be present in outgoing requests.

Copyright © 2026 Microsoft Corporation. Distributed under the MIT license.