andrew-security

[cyan zephyr]

Hello

it's for our own Risk team. Not sure how that could be a vulnerability, it's the same as loading that URL in a browser

[vast orchid]

Hi, I've determined that the vulnerability they detected poses no actual risk as it's sent from Stripe's end.

However I just wanted some clarity on the purpose of the request so I can label it as a false positive with a reason.

[cyan zephyr]

I mean again it's the same as loading your website 😅

but ultimately it's for our own processes, we look at your domain, make sure it's active/valid and cache what is on that page

[vast orchid]

Ok great, thanks so much