Skip to content
RateStack
Glossary

SSRF (Server-Side Request Forgery)

An attack class in which untrusted input causes a server to make outbound requests to internal or restricted endpoints.

RateStack's SafeUrlValidator blocks DNS-resolved IPs in the loopback, private, link-local, and cloud-metadata ranges. Per-service host allowlists further restrict outbound endpoints.

SSRF (Server-Side Request Forgery) — glossary | RateStack