The core vulnerability exists in the URL validation flow. The restricted() method was insufficient as it only checked protocols, not hostnames. The handle() method's pre-render validation was missing entirely for some endpoints. The patch adds: 1) Hostname validation in restricted(), 2) Enforcement of restrictions in handle(). In vulnerable versions, these security checks were absent, allowing internal host access. Both functions would appear in stack traces when processing malicious render/screenshot requests.