SecurityPlanetScaleover 2 years ago
Webhook security: a hands-on guide
6 min read
PlanetScale engineers built a webhooks service with two layers of defense against server-side request forgery (SSRF). URL validation limits allowed endpoints, and egress rules or a proxy restrict where the service makes HTTP connections. HTTPS is required for all webhook URLs.
Level
Hype check
Tap to vote and see what everyone thinks.
