expertSecurity (Expert Round)
How do you prevent SSRF attacks in a microservice that fetches external URLs on a user's behalf?
Tests whether you know to allowlist domains and specifically block internal metadata IP ranges like 169.254.x.x.
This is a Pro question
Sign in, then upgrade to Pro or Power to unlock this question and the full Interview Prep bank.
How do you prevent SSRF attacks in a microservice that fetches external URLs on a user's behalf?