Agreed. I put together a little library to handle denying access to "local" resources, to abstract this a little and avoid overlooking common mistakes: https:

Agreed. I put together a little library to handle denying access to "local" resources, to abstract this a little and avoid overlooking common mistakes: https://github.com/skx/remotehttp https://github.com/skx/remotehttp