// [CRUCIBLE-SEED]
// category: ssrf
// severity: high
// language: csharp
// expected: SSRF via WebClient.DownloadString with user-supplied URL

using System.Net;
using Microsoft.AspNetCore.Mvc;

namespace App.Controllers
{
    [ApiController]
    [Route("api/[controller]")]
    public class ProxyController : ControllerBase
    {
        [HttpGet]
        public IActionResult Fetch([FromQuery] string url)
        {
            // Vulnerable: fetches arbitrary URL including internal services
            using var client = new WebClient();
            string content   = client.DownloadString(url);
            return Content(content, "text/plain");
        }
    }
}