Giters

derlin / rickroller

RickRoll your friends like a pro! Just enter a webpage URL and let the magic happen. Every click on the page will send you to the one and only Rick Astley's iconic hit.

Home Page:https://tinyurl.eu.aldryn.io

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Avoid SSRF

derlin opened this issue · comments

commented

RickRoller is vulnerable to SSRF attacks.

To avoid that, when receiving an URL to rickroll, the code should resolve the host to get the IP, and check the IP is a public one before doing the GET and rendering its content.