New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Protect against SSRF #222

Open

jpmckinney opened this issue Oct 20, 2024 · 0 comments

Member

jpmckinney commented Oct 20, 2024 •

edited

Loading

https://blog.includesecurity.com/2023/03/mitigating-ssrf-in-2023/

https://github.com/stripe/smokescreen
https://docs.python.org/3/library/ipaddress.html has methods like is_loopback is_private, etc. as used in requests-hardened https://github.com/saleor/requests-hardened/blob/389cd299607e8441de0f855e3589acd2b9c80d4a/requests_hardened/ip_filter.py#L39-L50

https://github.com/saleor/requests-hardened (unpopular)
https://pypi.org/project/SafeURL-Python/ (archived)

jpmckinney mentioned this issue

Protect against SSRF open-contracting/spoonbill-web#495

Open

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment