Avoid SSRF
derlin opened this issue · comments
RickRoller is vulnerable to SSRF attacks.
To avoid that, when receiving an URL to rickroll, the code should resolve the host to get the IP, and check the IP is a public one before doing the GET and rendering its content.