7 lines
423 B
Markdown
7 lines
423 B
Markdown
# Network and SSRF security
|
|
|
|
* Use HTTPS and never disable certificate or TLS validation.
|
|
* Restrict inbound and outbound access to required ports, interfaces, hosts, and protocols.
|
|
* Treat user-controlled URLs as dangerous: allowlist schemes and hosts, block localhost, metadata, and internal ranges, and revalidate redirects.
|
|
* Set timeouts, response-size limits, bounded retries, and cancellation for remote operations.
|