All rules →
Rules / Swift
SHIELD-SWIFT-014

SSRF via dynamic URL request

highSwiftCWE-918CVSS 7.7

What it detects

A URLSession request targets a URL constructed from variable input.

How to fix

Validate the host against an allowlist before issuing outbound requests.

Scan your repo freeFull documentation
Back to all rules
SHIELD-SWIFT-014: SSRF via dynamic URL request — Zennoxa Shield