Your webhook feature is an SSRF feature until proven otherwise
How a customer-configurable webhook became a network oracle, and the four-layer guard (parse, resolve, pin at connect, re-check at send) that closed it.
7 min read
#security
Topic: Vulnerabilities, guards and the mistakes behind them.
1 post in Security · All tags