Bypass SSRF via protocol change redirect

Server Side Request Forgery (SSRF) is a fairly well known vulnerability with mitigation methods in place. So imagine my surprise when I got…