# SSRF issue : Protection triggered
**URL:** https://community.xibo.org.uk/t/ssrf-issue-protection-triggered/38406
**Category:** CMS Installation
**Created:** [September 4, 2026, 9:43am UTC](https://community.xibo.org.uk/t/ssrf-issue-protection-triggered/38406 "2026-09-04T09:43:15Z")
**Posts on this page:** 3
**Page:** 1
### Author:  [@JFMALBI](https://community.xibo.org.uk/u/JFMALBI)
#### Post date: [September 4, 2026, 9:43am UTC](https://community.xibo.org.uk/t/ssrf-issue-protection-triggered/38406/1 "2026-09-04T09:43:16Z")
To be completed by the original poster:
# CMS Version
4.5.2
# Installation Method
Docker install
# Operating System
Ubuntu 24.04
# Issue
We have updagred our onpremise Xibo, deployed with Docker, and we have an error with our Dadaset. : run: SSRF Protection triggered. Blocked request to restricted IP: 10.x.x.x Exception Type: RuntimeException
We found on the Xibo github that Xibo have improved security features and it seems that we have to set allow\_local\_network config flag to true … but we are with a docker image. How can we proceed ?
---
### Author:  [@MrStefan](https://community.xibo.org.uk/u/MrStefan)
#### Post date: [September 4, 2026, 10:15am UTC](https://community.xibo.org.uk/t/ssrf-issue-protection-triggered/38406/2 "2026-09-04T10:15:37Z")
There’s a note under the changelogs if your CMS instance runs behind a reverse proxy or load balancer. Perhaps this could be relevant.
> **[CMS v4.5.2 - Changelog | Xibo Docs](https://docs.xibosignage.com/changelog#cms-v4.5.2)**
>
> We have released our second patch update to Xibo v4.5. This release continues to build on the momentum and introduces 15 enhancements and fixes. | The latest updates and changes.
---
### Author:  [@dan](https://community.xibo.org.uk/u/dan)
#### Post date: [September 9, 2026, 8:11am UTC](https://community.xibo.org.uk/t/ssrf-issue-protection-triggered/38406/3 "2026-09-09T08:11:54Z")
> [@JFMALBI](#):
>
> We found on the Xibo github that Xibo have improved security features and it seems that we have to set allow\_local\_network config flag to true … but we are with a docker image. How can we proceed ?
You can set the following:
```php
// custom/settings-custom.php
$allowLocalNetworkRequests = true;
```
For anyone interested, these security changes are explained here: [GitHub - xibosignage/xibo-cms: Xibo Content Management System · GitHub](https://github.com/xibosignage/xibo-cms/tree/develop?tab=security-ov-file#operator-notes--security-relevant-settings)
> [@MrStefan](#):
>
> There’s a note under the changelogs if your CMS instance runs behind a reverse proxy or load balancer.
Yes, this is another security measure, although a different one from the OP. If you have a reverse proxy in front of your CMS, you need to tell Xibo its IP so that it trusts it.