SSRF

Webhook Security: Signatures, Replay Attacks, and SSRF

Secure both sides of a webhook: verify genuine events, stop replay and duplicate processing, and prevent callback URLs from reaching internal systems.