Sheogorath on Nostr: you shouldn't be able to disable these protections. Further to mitigate the risk it's ...

you shouldn't be able to disable these protections. Further to mitigate the risk it's probably better to deploy TLS for internal sides or validate hist headers. Both should be a better fix than hoping that DNS never returns local IPs.