UNunez574477 (Community Member) asked a question.
SSRF detected even with a whitelist
SSRF Was detected on our system because we use a httpclient to send request to another own services or 3rd party services, we know which urls want to call so I whitelist can be possible, the thing it has to be a dynamic list because we have several envs and Veracode stills mark it as Flaw, we cannot hardcode the urls because it will create a long list
.png){kind=logo}
Hello,
I would recommend you contact our technical support team. Here's how you can log a case:
Navigate to the upper right corner of any page in the Community, and click on your user avatar. Select Contact Support from the drop-down menu and select "Static Scan" as the product line. Your queries will be answered.
Thanks,
Veracode.