SSRF-hardening a screenshot API
A screenshot API takes URLs from strangers and opens them inside your infrastructure. Blocklists are the easy 20% — what actually bites is IP-literal obfuscation, IPv4-mapped IPv6, and DNS rebinding. This is the three-layer guard we run in production.
Read the post →