fix(http): prevent SSRF (#5130)* add test action* set default http retries to 0* dont follow redirections* add SSRF protection