Optimize extension API endpoint SSRF validation

If there is an SSRF or other security vulnerability this should be reported to the security team instead of being handled in public.

Thanks @longwave for pointing this out, I'm totally unaware of security issues file process.
Closing this