Virus scanning: Storage and security design
Requires a clean scanner verdict before uploaded objects become downloadable, quarantines failed or timed-out scans, and defines containment and re-scan steps for a suspected scanner compromise.
Specifies server-side request forgery controls using allowlisted schemes and hosts, resolve-then-recheck DNS, blocking of link-local and cloud metadata destinations, and a ban on using caller URLs as an open proxy.