[KongchangAI]
ConceptSSRF / 服务端请求伪造 / Server-Side Request Forgery

SSRF Protection

Server-Side Request Forgery (SSRF) is a class of network security attacks in which an attacker crafts malicious input to induce a server to make requests to specified internal addresses. In cloud environments, this technique is commonly used to steal temporary credentials and IAM role information from the Instance Metadata Service (IMDS).

Core Facts

Timeline (last 90 days)

Oct 19

DLP monitors and blocks the exfiltration of sensitive data, and SSRF protection prevents the agent from being induced to make unexpected requests to the internal network; these three (the V8 sandbox, DLP and SSRF protection) together constitute the governance layer.

Unverified50%
Oct 17

MCPFusion has eight built-in governance policies, including data loss prevention (DLP), SSRF protection, and an HMAC audit chain.

Unverified50%
Oct 12

Each tool call in Vinkius runs in an isolated V8 sandbox, preventing abnormal scripts from compromising the host system.

Unverified50%
Aug 15

SSRF is a class of web security vulnerability in which an attacker manipulates a server-side application into making HTTP requests to unintended internal or external addresses.

Verified75%

All Facts (4)

Source Articles