SSRF Attacks and Defenses: URL Parsing, Allowlists, and Cloud Metadata
SSRF Attacks and Defenses stop your servers from fetching attacker URLs. Learn allowlists, DNS checks, metadata blocks, and how to fail closed on parse.
Category
AI security covers the risks that appear when language models and agents read untrusted content and take actions on it. Prompt injection, server-side request forgery through fetch tools, data leakage and over-broad tool permissions are the main concerns. Defences pair classic backend controls such as allowlists, sandboxing and least privilege with strict limits on what a model can see and do.
1 article
SSRF Attacks and Defenses stop your servers from fetching attacker URLs. Learn allowlists, DNS checks, metadata blocks, and how to fail closed on parse.