New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Adding A10:2020 SSRF exercise #608

Open

fguisso wants to merge 1 commit into master from ssrf

Member

fguisso commented Nov 3, 2022

No description provided.


          Adding A10:2020 SSRF exercise

8bb1806

github-advanced-security bot found potential problems

View reviewed changes

owasp-top10-2021-apps/a10/doryl-site-check/app/api/services.go

+              func httpGet(url string) (map[string]string, missingSecurityHeaders, string) {
+              	rawHeader := make(map[string]string)
+              	res, err := http.Get(url)

Check failure

Code scanning / CodeQL

Uncontrolled data used in network request

The [URL](1) of this request depends on a [user-provided value](2).

henriporto self-assigned this

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment