hard20 pts · first answer countsssrfweb-security
Link previews fetch internal URLs
Your chat app’s server fetches any URL a user posts to build a link preview. Someone posts http://169.254.169.254/latest/meta-data/ and gets cloud credentials back. Which defense is most complete?
Discussion 0
Join free to post in the discussion.
Related questions
- What HttpOnly doesFull Stack Developer
- What HTTPS protectsFull Stack Developer
- Caching a bank statement pageFull Stack Developer
- Users see each other’s profileFull Stack Developer
- User bios rendered as HTMLFull Stack Developer
- Module variable holds the current userFull Stack Developer
- JWT algorithm confusionFull Stack Developer
- Redirect check that can be bypassedFull Stack Developer