Class Central is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

CodeSignal

Server-Side Request Forgery (SSRF) Prevention in Express

via CodeSignal

Go to class Write review

Overview

Understand and mitigate the risks of Server-Side Request Forgery (SSRF) in Express applications. This course covers detection, prevention, secure coding practices, and more.

Syllabus

  • Unit 1: Understanding SSRF Vulnerabilities
    • Detecting Internal Network SSRF Patterns
    • Detect Unsafe URL Schemes
    • Comprehensive URL Safety Check
    • Prevent Unsafe Server Side Requests
  • Unit 2: Preventing SSRF in Express
    • Basic Input Validation for SSRF Prevention
    • URL Parsing and Protocol Validation
    • Domain Whitelisting for Outbound Requests
    • Block Internal IPs with ipaddrjs
    • Complete SSRF Protection in Express
  • Unit 3: Monitoring and Responding to SSRF Incidents
    • Setting Up Request Logging with Morgan
    • Enhance SSRF Pattern Detection
    • Configure and Test Email Alerting
    • Track and Respond to SSRF Incidents
    • Admin Endpoint for Incident Review
  • Unit 4: Security Logging and Monitoring in Express Applications
    • Implementing HTTP Request Logging with Winston
    • Separate Error Logs with Winston
    • Detect and Log Suspicious URL Requests
    • Real Time Security Log Dashboard
    • Email Alerting for Suspicious Activity

Reviews

Start your review of Server-Side Request Forgery (SSRF) Prevention in Express

Go to class

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Sign up for free
Someone learning on their laptop while sitting on the floor.