16.7 Untrusted files are stored outside the webrootΒΆ

Verify that the web or application server is configured by default to deny access to remote resources or systems outside the web or application server.

Levels: 2, 3