Blog

#uploads

Publicaciones etiquetadas con "uploads" en el blog de AtendePraMim.

Preventing SSRF in file uploads

SSRF — Server-Side Request Forgery — is the class of bug where your server makes an HTTP request on behalf of a user to a URL the user controls. The classic case: a profile-picture import feature that takes a URL and fetches the image. The attacker gives you http://169.254.169.254/ and suddenly your server is handing the cloud metadata endpoint to the…

ALAlexandre Awadallak

Boletín

Mantente al día

Recibe nuevas publicaciones y entradas del changelog por correo o RSS.

RSSRSS del changelog