Preventing SSRF in Laravel: Why Blocking Private IPs Fails

Published by hadi on

I found there wasn’t any good SSRF prevention libraries for Laravel, so I built one. Very comprehensive tests based on this paper:
https://www.usenix.org/conference/usenixsecurity24/presentation/wessels

https://github.com/securized/laravel-ssrf

Read more

Categories: PHP
Tags:

Related Posts

PHP

PHP Attributes: What, Why, How and When

A deep dive into PHP attributes, from metadata and Reflection to practical design patterns, Laravel examples, performance, testing, and the cases where explicit code is better. Read more

PHP

Claude Code Routines: A Third Way Beyond /goal and /loop

There’s a third way to automate Claude Code, and unlike /goal and /loop, it doesn’t need your laptop open at all. Anthropic just shipped routines: cloud-hosted automations triggered by a schedule, an API call, or Read more…

PHP

Supercharge your PHP apps with Go-powered PHP extensions

A practical conference session on building PHP extensions with Go and FrankenPHP, then wiring them into Laravel and Symfony as native-feeling features. It uses an in-memory LRU cache as the example and offers a nice Read more…