3 ms·
GCP does it by requiring a header on requests to metadata systems. Require a header on your internal services and make sure you never send that header with use
by bpicolo 8y ago
GCP does it by requiring a header on requests to metadata systems.
Require a header on your internal services and make sure you never send that header with user-requested URLs and you can guarantee safety there.
- kerng 8y agoStill allows tons of attacks and recon, like port scans, or even crashes of processes- since internal things might not go through the same fuzzing scrutiny as external endpoints.