gitlab-org--gitlab-foss/app/validators/importable_url_validator.rb

# ImportableUrlValidator
#
# This validator blocks projects from using dangerous import_urls to help
# protect against Server-side Request Forgery (SSRF).
class ImportableUrlValidator < ActiveModel::EachValidator
  def validate_each(record, attribute, value)
    if Gitlab::UrlBlocker.blocked_url?(value, valid_ports: Project::VALID_IMPORT_PORTS)
      record.errors.add(attribute, "imports are not allowed from that URL")
    end
  end
end