Mitiate SSRF attack

Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-04-20 12:10:56 +02:00
parent 5b8918bd5a
commit 472ca703b5
9 changed files with 83 additions and 8 deletions
--- a/pkg/webhook/sender.go
+++ b/pkg/webhook/sender.go
@@ -88,7 +88,7 @@ func NewSender(pg *pg.Client, logger *log.Logger, cfg Config) *Sender {
 	return &Sender{
 		pg:             pg,
 		logger:         logger,
-		httpClient:     httpclient.DefaultPooledClient(httpclient.WithLogger(logger)),
+		httpClient:     httpclient.DefaultPooledClient(httpclient.WithLogger(logger), httpclient.WithSSRFProtection()),
 		encryptionKey:  cfg.EncryptionKey,
 		host:           cfg.Host,
 		cacheCreatedAt: time.Now(),