docs: Add Security comment (SSRF)

open-contracting · Oct 21, 2024 · a582313 · a582313
1 parent a11c112
commit a582313
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/process/management/commands/checker.py b/process/management/commands/checker.py
@@ -115,6 +115,7 @@ def _check_collection_file(collection_file):
             extensions = frozenset(extension for extension in extensions if isinstance(extension, str))
         else:
             extensions = frozenset()
+        # Security: Potential SSRF via extension URLs (within OCDS publication).
         schema = _get_schema(items_key, extensions)
 
         logger.debug("Checking %s of %s", items_key, item)