medium
Single Answer
0Alice wants to prevent server-side request forgery (SSRF) attacks. Which of the following will not be helpful for preventing them?
Answer Options
A
Removing all SQL code from submitted HTTP queries
B
Blocking hostnames like 127.0.01 and localhost
C
Blocking sensitive URLs like /admin
D
Applying allow list-based input filters
Correct Answer: A
Explanation
Server-side request forgery (SSRF) attempts typically attempt to get HTTP data passed through and will not include SQL injection. Blocking sensitive hostnames, IP addresses, and URLs are all valid ways to prevent SSRF, as is the use of allow list-based input filters.