flowcrafter_node_http_request_node_allow_internal_hosts
Description
Filter whether this request may reach internal/private hosts. Off by default (safe). Reaching an internal host is a developer opt-in, not a UI setting — a UI toggle would let any form editor re-open the SSRF surface with one click. Return true from code for the specific node/host you trust.
Usage
Allow a trusted node to reach internal hosts.
add_filter( 'flowcrafter_node_http_request_node_allow_internal_hosts', 'my_custom_function' );Parameters
$allow_internal
bool
Whether to allow private/loopback hosts.
$node
array
Node definition.
$run
Workflow_Run
Workflow run.
$form
array
GF form array.
Examples
Allow a trusted node to reach internal hosts
add_filter( 'flowcrafter_node_http_request_node_allow_internal_hosts', fn( $allow, $node ) => $allow || $node['id'] === 'trusted_request', 10, 2 );Since
1.0-beta-1Hook added.