Ask me anything about your lessons or your code.
“What is a port?” · “Why is my code erroring?”
Server-side request forgery. An app fetches a URL the user supplied, so an attacker points it at addresses only the server can reach, like 127.0.0.1 or an internal admin panel. The request comes from inside the network, so the firewall never sees anything wrong.