I’d like to let the users of my webapp have the app fetch URLs that they choose. They probably can’t do any harm by fetching internal URLs, but it seems safer to forbid that somehow. Is there a way to block internal URLs either by configuring Node’s fetch/https library, filtering the hostnames in some simple way, or configuring a Fly app to just not have outbound access to the internal network?
This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.