[Snyk] Investigate and resolve possible SSRF vulnerabilities

[exalate-issue-sync[bot]]

Snyk has identified two possible “Server-Side Request Forgery” vulnerabilities. Both are found in contacts/views.py. We should investigate and resolve these potential issues.

QA Notes

No user-facing changes. Unit tests should pass as normal.

DEV Notes

These warnings are for the {{candidate()}} and {{committee()}} methods in {{fecfiler/contacts/views.py}}

Design

null

See full ticket and images here: FECFILE-1752

[exalate-issue-sync[bot]]

Todd Lees commented: passes cr moving to qa

[exalate-issue-sync[bot]]

Todd Lees commented: [https://app.circleci.com/pipelines/github/fecgov/fecfile-web-api/4583/workflows/3936c9dd-5922-4c59-a4b8-c00b20ca8c4d/jobs/13190|https://app.circleci.com/pipelines/github/fecgov/fecfile-web-api/4583/workflows/3936c9dd-5922-4c59-a4b8-c00b20ca8c4d/jobs/13190]

!image-20241119-135824.png|width=957,height=612,alt="image-20241119-135824.png"!

[exalate-issue-sync[bot]]

Shelly Wise commented: QA review verified tests passing for this ticket per DEV.

!image-20241119-140405.png|width=936,height=574,alt="image-20241119-140405.png"!

QA Review Completed. Moved to Stage Ready.