Review Note
Last Update: 04/27/2023 06:12 AM
Current Deck: Software Security
New Card (Unpublished)Currently Published Content
Front
Back
No published tags.
Pending Suggestions
Field Change Suggestions:
Front
Commit #1539
What are three defenses against SSRF?
Back
Commit #1539Input validation
whitelist of DNS name or IP address which your application needs access to
Disable unused URL schemas
If only HTTP/HTTPS used, disable
file:// dict:// ftp:// gopher://Auth on internal services
Enable authentication on services such as MongoDB, Redis, etc.