LPS-42314 Fix Marketplace portlet to prevent SSRF and downloading any file to disk