sknebelZegnat: just saw you linked to that blackhat "A new era of SSRF" presentation. have been looking into it a bit, but "rewrite my WM handling in a more paranoid way" is still on the todo list (I have code to stop access to localhost at least, but I don't trust it 100%)
