[context7]

• Header exclusion for referer/origin SSRF — added header exclusion guidance and pattern-checks-still-run note, in docs/tutorial/security/penetration-detection.md
• Header exclusion for referer/origin SSRF — noted header exclusion skips semantic analysis only, in docs/tutorial/decorators/advanced.md
• Header exclusion for referer/origin SSRF — updated excluded_detection_headers table description, in docs/tutorial/configuration/security-config.md

[github-actions]

Thanks for opening your first pull request on fastapi-guard!

Quick checklist before review (most of these are enforced by CI, but worth a glance):

• The PR body says Closes #N for an open issue (the issue-link check enforces it); chores take the no-issue label
• make lint - ruff format, ruff check, mypy, and vulture
• make test - full test suite passes with 100% coverage
• make security - bandit, safety, and pip-audit all clean
• make quality - radon and xenon complexity thresholds respected
• No # noqa / # type: ignore shortcuts; pre-existing violations in touched files are fixed
• Added an entry under ## Unreleased in CHANGELOG.md
• If you touched a public API, updated the relevant page under docs/
• If the change involves engine logic, the corresponding fix landed in guard-core first

See CONTRIBUTING.md for the full workflow and the Code of Conduct for the community standards we follow.

Questions while you work: Discord #help, https://discord.gg/ZW7ZJbjMkK

Welcome aboard - a maintainer will review shortly.