CGordon830606 (Community Member) asked a question.
For and SSRF violation, does the undesirable pattern need to be in a server context to be a problem?
For instance if I have the some javascript that runs on a server, which allows untrusted input to be used in a request, this is an obvious SSRF. But, if that same pattern is only running on the client where the user already has full control of all requests, is that an SSRF?
.png){kind=logo}
Hello user,
I would recommend you contact our technical support team. Here's how you can log a case:
1. Navigate to the upper right corner of any page in the Community, and click on your user avatar.
2. Select Contact Support from the drop-down menu.Open a case with Support, and the team will be able to assist you.
Regards,
Pranita
Veracode Inc.