vulns.co
/
GKData.io MCP

Conceptual model · 1 min read

Layer server-request destination controls

Original conceptual defense-in-depth model linked to the historical Shopify Exchange case and OWASP guidance. It is not a vendor architecture diagram. Policy must fit the service’s destination requirements.

The conceptual model

A requested destination passes consistent parsing, application policy and independent network egress checks. Invalid input or either policy failure is rejected. Only an approved destination is requested.
A requested destination passes consistent parsing, application policy and independent network egress checks. Invalid input or either policy failure is rejected. Only an approved destination is requested.
Full-size SVG ↗Mermaid source ↓Graphviz source ↓

Cases and references behind the model

DisclosureShopify Exchange screenshot service crossed internal boundaries ↗ReferenceOWASP Server-Side Request Forgery Prevention ↗

Sources and provenance

  1. shopify.engineering Primary source
  2. cheatsheetseries.owasp.org Primary source

Record reviewed 2026-10-02. Snapshot 53796974ace8. Open the complete JSON contract.

GitHub snapshot 2026-10-04

53796974ace8 · JSON exports & schemas · CC BY 4.0 content / MIT software