Kentico 中的服务器端请求伪造 (SSRF) 漏洞
最近，我们的工作场所加强了安全性，并引入了一些相当强大的扫描软件来处理它，我们已经能够处理大部分漏洞，但有一个漏洞正在躲避我们，即 SSRF 或服务器端请求伪造。这似乎很奇怪，关于这个项目的信息如此之少。
不管怎样，我问社区，Kentico 中有什么东西应该能够减轻这些攻击吗？如果是这样，它将如何实施，我对这方面还相当陌生。
Recently our workplace has been tightening down on security, and has brought in some rather robust scanning software to handle it, we have been able to get most of the vulnerabilities handled but one is eluding us, the SSRF or Server Side Request Forgery. It seems odd that there is so little that is put out on this item.
Anyway, I ask the community, is there something in Kentico that should be able to mitigate these attacks? If so, how would it be implemented, I am still fairly new to this side of things.
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（1）
Kentico 支持防止跨站点请求伪造 (CSRF/XSRF) - 请参阅此 https://docs.xperience.io/secure-websites/developing-secure-websites/cross-site-request-forgery-csrf-xsrf
Kentico support to prevent Cross site request forgery (CSRF/XSRF) - Refer this https://docs.xperience.io/securing-websites/developing-secure-websites/cross-site-request-forgery-csrf-xsrf