Unverified50% confidenceFactExact time
The runtime proxy firewall's SSRF protection includes blocking internal URLs (such as localhost, 169.254.169.254, 10.x, 192.168.x), validating redirect chains (at most 3 hops, no protocol downgrade), preventing DNS rebinding, and extracting and validating embedded URLs through deep document inspection.
1
Sources
50%
Confidence
Long-term
Relevance
10/13/2026
First Seen
Sources
Related Entities
Related Claims
Unverified防御SSRF需对用户可控的URL做协议白名单、禁止访问内网地址、过滤file://等危险协议80% similarUnverifiedSSRF利用中常被检测的危险协议包括file://（读取本地文件）、dict://（探测端口开放状态）、ftp://（有时可绕过过滤）73% similarUnverifiedThe runtime proxy firewall is deployed as a reverse proxy, screening every tool call and returned result in real time, and enforcing SSRF protection, OAuth tampering detection, PII protection, threat intelligence matching, and auditable logging.72% similarUnverifiedIn agent browser automation scenarios, an SSRF variant threat exists where prompt injection can be used to induce the agent to access internal network addresses such as 169.254.169.254.70% similarUnverified防御SSH暴力破解的有效手段包括禁用密码登录仅允许公钥认证、更改默认端口、部署fail2ban，以及通过VPN消除公网暴露68% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1018479API
curl https://kongchang.com/api/v1/knowledge/claims/1018479MCP
get_claim(id=1018479)