SSRF: 1 prior fix. Scrutinize any change in this area.

modules/api/api.py: most-fixed (1 issue). Treat as high-risk during review.

1 high-severity fix in this history; regressions here are high-impact.