PHP doesn’t let you serialize closures, but Laravel does, thanks to an underrated package that’s built into the framework.
PHP
Preventing SSRF in Laravel: Why Blocking Private IPs Fails
I found there wasn’t any good SSRF prevention libraries for Laravel, so I built one. Very comprehensive tests based on this paper: https://www.usenix.org/conference/usenixsecurity24/presentation/wessels https://github.com/securized/laravel-ssrf Read more