deny ssrf attack and some illegality method