Closing SSRF in customer-configurable webhooks: a four-layer guard with connect-time DNS pinning
Webhook features let customers register a URL that a service will call. Because the URL is attacker-controlled and the request originates inside the service's network, every webhook feature is a server-side request forgery (SSRF) surface. This report describes a guard that closed a practical SSRF hole in a SaaS backend...