: Explicitly block requests to Link-Local addresses (like 169.254.169.254 ) and private IP ranges (RFC 1918).