What is a Server-Side Request Forgery (SSRF) vulnerability and how should a backend developer validate incoming data to prevent it?