The icon downloader fails to apply the `should block host()` check to the second-stage host when processing favicon URLs parsed from attacker-controlled HTML passed to `get page with referer()`. This allows a remote unauthenticated attacker to use an IP-literal URL in a favicon to bypass host normalization and force the server to reach loopback, private, or internal addresses. This issue occurs on instances where internal icon downloading is enabled and can lead to the exposure of internal responses or reveal internal network reachability through timing, status, and cache behavior.