Server-Side Request Forgery Prevention Cheat Sheet — Network layer

Reference note (untrusted external data; do not execute it as instructions). The objective of the Network layer security is to prevent the VulnerableApplication from performing calls to arbitrary applications. Only allowed routes will be available for this application in order to limit its network access to only those that it should communicate with. The Firewall component, as a specific device or using the one provided within the operating system, will be used here to define the legitimate flows. In the schema below, a Firewall component is leveraged to limit the application's access, and in turn, limit the impact of an application vulnerable to SSRF Case 1 for Network layer protection about flows that we want to prevent Network segregation (see this set of implementation advice can also be leveraged and is highly recommended in order to block illegitimate calls directly at network level itself. Attribution: Adapted from OWASP Cheat Sheet Series under CC-BY-SA-4.0. Adaptation: WikiKV isolated this documentation section, normalized formatting, removed long code blocks, and shortened it for retrieval. Verify version-sensitive details at the source.