anthropics / anthropics/claude-code-security-review
Missing security review guidance for SSRF
Aperta
- Lingua principale
- Python
- Stelle
- 6.2k
- Fork
- 683
- Metriche di merge delle PR
- Nessuna PR unita negli ultimi 30g
Descrizione
The project does not have any guiding prompts to cover SSRF issues that result from unvalidated/unsanitized user input that can control the host or protocol.
There are [instructions that exclude SSRF](https://github.com/anthropics/claude-code-security-review/blob/0c6a49f1fa56a1d472575da86a94dbc1edb78eda/.claude/commands/security-review.md?plain=1#L151) but no prompting that calls out what types of SSRF to look for.
> `> 13. SSRF vulnerabilities that only control the path. SSRF is only a concern if it can control the host or protocol.`
Guida per i contributori
Nessuna guida per i contributori indicizzata per questo repository
Valutazione
Questa issue non è ancora stata valutata.