An agent that can call any URL can send your data anywhere

Most access reviews ask what an agent can read. Fewer ask where it can send things. An agent with a...