Bump, this should be added. It shouldn't be that hard to block the "localhost" url, Minehut has some very experience developers (at least I think) so it should be possible.
This would be great to use for a player database, or a payment api, and much more!
I reckon they could also limit bandwith usage, like max 20 request per minute or something.