I'm learning SSRF. I learnt that typing "&x=" kinda turn off the rest of an URL (like https://some.website.com/user?id=9&x=.website.com/api/item?id=9)
Everything that comes after the "&x=" part gets ignored. Why is that? Or, if it's not really ignored, then what happens?