We have scanned our code through Veracode and it gives us ServerSide Request Forgery issue for below line of code. Need help to resolve this issue.

This is my method and i am getting issue At here " response = client.SendAsync(request).Result;" in the below code. Please response as soon as possible.

public string GetServiceResponse(string serviceUrl, string content = null, bool isPostRequest = false)

    {

      try

      {

        string baseUrl = Constants.GetHostUrl();

        if (!string.IsNullOrWhiteSpace(baseUrl) && !string.IsNullOrWhiteSpace(serviceUrl))

        {

          HttpClient client = new HttpClient();

          HttpResponseMessage response = null;

          HttpRequestMessage request = null;

          if (!isPostRequest)

          {

            request = new HttpRequestMessage(HttpMethod.Get, baseUrl + serviceUrl);

            request.Headers.Add("UserName", Sitecore.Context.User.Name);

          }

          else

          {

            request = new HttpRequestMessage(HttpMethod.Post, baseUrl + serviceUrl);

            request.Headers.Add("UserName", Sitecore.Context.User.Name);

            request.Content = new StringContent(content, Encoding.UTF8, "application/json");

            request.Content.Headers.ContentType = new MediaTypeWithQualityHeaderValue("application/json");

          }

          string key=Convert.ToString(System.Web.HttpContext.Current.Session["Key"]);

          string token = Convert.ToString(System.Web.HttpContext.Current.Session["Token"]);

          if (!string.IsNullOrEmpty(key) && !string.IsNullOrEmpty(token))

          {

            request.Headers.Add("key", key);

            request.Headers.Authorization = new AuthenticationHeaderValue("Bearer", token);

          }

          response = client.SendAsync(request).Result;

          if (response != null && response.Content != null && response.IsSuccessStatusCode && response.StatusCode == HttpStatusCode.OK)

          {             

            return (response.Content.ReadAsStringAsync().Result != null && response.Content.ReadAsStringAsync().Result != "null" && 

                response.Content.ReadAsStringAsync().Result != string.Empty) ? response.Content.ReadAsStringAsync().Result : string.Empty;

          }

          return string.Empty;

        }