AntiSSRFPolicy.denied_headers Property

Definition

A read-only list of headers that are forbidden from being included in outgoing requests.

denied_headers: tuple[str]  # read-only

Both required_headers and denied_headers are considered when validating a request. If any header is in both lists, the request will always be blocked.

Property Value

tuple[str]

A read-only tuple of header names that are blocked by the policy.


Copyright © 2026 Microsoft Corporation. Distributed under the MIT license.