All rules →
Rules / Go
SHIELD-GO-010

Server-Side Request Forgery via http.Get with user input

highGoCWE-918CVSS 8.6

What it detects

Fetching user-controlled URLs with http.Get or http.Post may allow SSRF.

How to fix

Validate URLs against an allowlist before making outbound HTTP requests.

Scan your repo freeFull documentation
Back to all rules
SHIELD-GO-010: Server-Side Request Forgery via http.Get with user input — Zennoxa Shield