feat(ssrf): add blind SSRF (OAST) multiparam template #13440
                
     Closed
            
            
          
  Add this suggestion to a batch that can be applied as a single commit.
  This suggestion is invalid because no changes were made to the code.
  Suggestions cannot be applied while the pull request is closed.
  Suggestions cannot be applied while viewing a subset of changes.
  Only one suggestion per line can be applied in a batch.
  Add this suggestion to a batch that can be applied as a single commit.
  Applying suggestions on deleted lines is not supported.
  You must change the existing code in this line in order to create a valid suggestion.
  Outdated suggestions cannot be applied.
  This suggestion has been applied or marked resolved.
  Suggestions cannot be applied from pending reviews.
  Suggestions cannot be applied on multi-line comments.
  Suggestions cannot be applied while the pull request is queued to merge.
  Suggestion cannot be applied right now. Please check back later.
  
    
  
    
Template / PR Information
Adds a blind SSRF detector using OAST across common URL/redirect parameters:
url, next, redirect, continue, download, image, feed, callback, return.Path
http/vulnerabilities/ssrf/blind-ssrf-oast-multiparam.yamlWhy
Server-side URL fetch/redirect endpoints often accept external URLs.
This template confirms SSRF via OAST interaction, reducing false positives.
Template Validation
I've validated this template locally:
Sample run (anonymized)