Unverified50% confidenceSolutionExact time
In Live mode, Holdfast performs double SSRF validation on the forwarding URL entered by the user: it checks the target address once when saving, and checks the resolved result again on every dial.
1
Sources
50%
Confidence
Long-term
Relevance
10/18/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedHoldfast applies a verbatim post-check to customer-facing explanations: if they contain terms such as "HTTP", "payload" or "endpoint", or promise an action that was not performed, they are rejected and replaced with built-in rule wording; the title is always generated by code.64% similarUnverifiedHoldfast's core design principle is: a message is not considered acknowledged until it has been safely stored.64% similarUnverifiedIt is recommended that users wait 24–48 hours after receiving the SheerID verification success email before logging back in to check their subscription status, to avoid triggering the verification limit error by repeatedly clicking Continue.58% similarUnverifiedThe Webhook approach needs to guard against SSRF (server-side request forgery); mature implementations usually require the callback address to undergo ownership verification (such as sending a challenge and validating the response), and restrict target IP ranges with an allowlist.57% similarUnverifiedThe workflow in the article deduplicates at the contact level by email address to avoid duplicate records for the same customer; at the opportunity level, it checks whether the contact already has an opportunity in the corresponding pipeline and, if so, skips creation.57% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1061384API
curl https://kongchang.com/api/v1/knowledge/claims/1061384MCP
get_claim(id=1061384)