Collection of best practices for providing and consuming webhooks

Re:Collection of best practices for providing and consuming ... by calyhre on Friday August 19, 2022 @03:46AM (#32518461)

At Slite, for all outgoing calls we use a sandboxed proxy. It has saved us a few times already. We detailed the trick in a blog post -> https://slite-tech-blog.ghost.io/anti-ssrf-solution/

[ Parent | on HN ]

Re:Collection of best practices for providing and consuming ... by freeqaz on Friday August 19, 2022 @06:56AM (#32519499)

This is the path I've seen be fairly robust at a few tech companies I've helped sort out this defense for. I've helped write libraries too but the proxy is the easiest approach when targeting many languages.

[ Parent | on HN ]