AntiSSRFPolicy Properties

Property Description
add_xff_header Determines whether to automatically add the X-Forwarded-For header to outgoing requests that don’t already include it.
allowed_addresses List of IP networks that are explicitly allowed by the policy.
allow_plain_text_http Determines whether HTTPS is required or HTTP is allowed.
denied_addresses List of IP networks that are explicitly blocked by the policy.
denied_headers List of headers that are forbidden from being included in outgoing requests.
deny_all_unspecified_ips Determines whether all IP addresses should be blocked by default or only denied_addresses should be blocked.
required_headers List of headers that are required to be present in outgoing requests.

Copyright © 2026 Microsoft Corporation. Distributed under the MIT license.