Libraries tagged by ssrf

Validate URLs and IP addresses against SSRF, DNS rebinding, and cloud-metadata attacks.

Go to Download

Server-Side Request Forgery (SSRF) protection plugin for HTTPlug

Go to Download

An all-in-one, config-gated webhooks toolkit for Laravel: send signed outbound webhooks (Standard Webhooks signatures by default, Ed25519 optional), receive and verify inbound ones, let customers self-serve their endpoints, and observe every delivery on a dashboard — switch on only the layers you need.

Go to Download

A drop-in replacement for 'curl_exec', designed to prevent SSRF attacks.

Go to Download

A drop-in replacement for 'curl_exec', designed to prevent SSRF attacks.

Go to Download

SSRF prevention for Laravel. Protect Http::, Guzzle, and validate user-supplied URLs against server-side request forgery.

Go to Download

Cbox SSRF — a hardened, config-driven guard against server-side request forgery for outbound URLs in Laravel. Blocks private/reserved/cloud-metadata targets, pins DNS, and refuses redirects.

Go to Download

A drop-in replacement for 'curl_exec', designed to prevent SSRF attacks.

Go to Download

A production-grade, security-hardened media management & chunked file upload package for Laravel.

Go to Download

The SIEM log-streaming delivery engine for Laravel — a durable transactional outbox, queued batched delivery with retry/backoff/dead-letter/circuit-breaker, SSRF-guarded HTTP egress, encrypted destination secrets, and PII redaction, on top of the framework-agnostic cboxdk/siem core.

Go to Download

Laravel-aware security rules for php-security-scanner. Detects Laravel SQL injection (DB::raw, whereRaw), mass assignment, debug/dd leaks, unsafe validators, CSRF bypass, insecure cookies, env exposure, Blade raw echo, open redirect, Http SSRF, Storage/File path traversal, file-upload validation gaps, Auth/Crypt/Artisan/Process/Config injection, view-name injection, session fixation, and Mail header injection.

Go to Download

A Laravel package that protects outbound HTTP requests from SSRF (Server-Side Request Forgery): it validates that a URL's host resolves only to public IPs (denying private, reserved, loopback and link-local ranges by default), pins the connection to the validated IP to close the DNS-rebinding TOCTOU window, and performs safe GET requests that re-validate every redirect hop.

Go to Download

Secure magnet link integration for Flarum with SHA-256 token protection, SSRF-hardened tracker scraping, live click counters, and an optimized discussion list preview tooltip.

Go to Download

PSR-18 HTTP-клиент для PHP 8.1+: cURL-транспорт, защита от SSRF, настройка таймаутов и опций запроса, обмен PSR-7 сообщениями. Реализует psr/http-client.

Go to Download

A drop-in replacement for 'curl_exec', designed to prevent SSRF attacks.

Go to Download