2022-09-01 17:36:53 +02:00
|
|
|
=== How does this work?
|
|
|
|
|
|
2022-11-23 17:38:23 +01:00
|
|
|
The application should avoid opening URLs that are constructed with untrusted data.
|
2022-09-01 17:36:53 +02:00
|
|
|
|
2022-11-23 17:38:23 +01:00
|
|
|
When such a feature is strictly necessary, SSRF can be mitigated by applying
|
|
|
|
|
an allow-list of trustable schemes and domains.
|
