[10.4] Server Side Request Forgery in Services and Web Hooks

See merge request gitlab/gitlabhq!2347