Microsoft.Security.AntiSSRF 1.0.1
Microsoft AntiSSRF Library for .NET
The Microsoft AntiSSRF Library for .NET is a security-developed, exhaustively-tested library that provides robust URL validation to protect .NET applications from Server-Side Request Forgery (SSRF) vulnerabilities. Designed specifically for .NET Framework and .NET Core applications, it integrates seamlessly with HttpClient through the AntiSSRFHandler class, allowing developers to secure outbound HTTP requests with minimal code changes.
How to Use
The AntiSSRF Library provides validation for different scenarios based on your trust requirements:
| Use Case | Description | Documentation Link |
|---|---|---|
| General Case | The untrusted URL can belong to any domain or an untrusted domain. | AntiSSRFPolicy |
| Azure Key Vault Domain | The untrusted URL must be an Azure Key Vault endpoint. | URIValidator.InAzureKeyVaultDomain |
| Azure Storage Domain | The untrusted URL must be an Azure Storage endpoint. | URIValidator.InAzureStorageDomain |
| Allowlist of Trusted Domains | The untrusted URL must belong to a specific, trusted domain. | URIValidator.InDomain |
Key Features
SSRF Attack Prevention - Blocks malicious server-side request forgery attempts
Private Network Protection - Separate built-in configuration options for internal vs. external address HTTP clients
DNS Rebinding Protection - Guards against DNS-based attacks
Redirect Protection - Re-validates on all redirects to prevent bypass attempts
Protocol Validation - Ensures only safe protocols are used
Fully Customizable - Configure domain allowlists, IP ranges, headers, and validation policies
Additional Documentation
Explore our comprehensive documentation to get the most out of Microsoft AntiSSRF:
Getting Started
- Microsoft AntiSSRF Documentation
- Quick Start Guide
- Security Best Practices
- Frequently Asked Questions
- Changelog
API Documentation
Feedback & Contributing
We welcome feedback and contributions from the community! Here's how you can get involved:
- Report Issues: GitHub Issues - Report bugs or request new features
- Contribute: Contributing Guide - Learn how to contribute to the project
- Contact: antissrf-oss@microsoft.com - Direct email for questions and feedback
Support Policy
For support inquiries, contact antissrf-oss@microsoft.com.
Showing the top 20 packages that depend on Microsoft.Security.AntiSSRF.
| Packages | Downloads |
|---|---|
|
Microsoft.Diagnostics.Runtime
ClrMD is a set of advanced APIs for programmatically inspecting a crash dump of a .NET program much in the same way that the SOS Debugging Extensions (SOS) do. This allows you to write automated crash analysis for your applications as well as automate many common debugger tasks. In addition to reading crash dumps ClrMD also allows supports attaching to live processes.
|
1 |
.NET 8.0
- No dependencies.
.NET Standard 2.0
- System.Memory (>= 4.5.5)
- System.Threading.Tasks.Extensions (>= 4.5.4)