{"id":247,"date":"2026-09-27T20:02:33","date_gmt":"2026-09-27T17:02:33","guid":{"rendered":"https:\/\/codeshot.ru\/?p=247"},"modified":"2026-09-27T20:02:33","modified_gmt":"2026-09-27T17:02:33","slug":"golang-fiber-ssrf-protection","status":"publish","type":"post","link":"https:\/\/codeshot.ru\/?p=247","title":{"rendered":"golang fiber ssrf protection: \u043a\u0430\u043a \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u0441\u0430\u0439\u0442 \u043e\u0442 SSRF"},"content":{"rendered":"

\u0412\u0430\u0448\u0430 Go\u2011Fiber API \u043c\u043e\u0436\u0435\u0442 \u0441\u0442\u0430\u0442\u044c \u043c\u0438\u0448\u0435\u043d\u044c\u044e SSRF\u2011\u0430\u0442\u0430\u043a, \u0435\u0441\u043b\u0438 \u043d\u0435 \u0432\u0430\u043b\u0438\u0434\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0435 URL \u0438 \u043d\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c. \u0412 \u044d\u0442\u043e\u043c \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u0435 \u043c\u044b \u0440\u0430\u0437\u0431\u0435\u0440\u0451\u043c, \u043a\u0430\u043a \u0432 Go\u2011Fiber \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 \u043e\u0442 SSRF, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f whitelist\u2011\u044b, \u0442\u0430\u0439\u043c\u0430\u0443\u0442\u044b \u0438 \u043f\u0440\u043e\u0441\u0442\u0443\u044e \u0432\u0430\u043b\u0438\u0434\u0430\u0446\u0438\u044e \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u041c\u044b \u043f\u043e\u043a\u0430\u0436\u0435\u043c \u0433\u043e\u0442\u043e\u0432\u044b\u0439 \u0440\u0430\u0431\u043e\u0447\u0438\u0439 \u043a\u043e\u0434, \u0442\u0438\u043f\u0438\u0447\u043d\u044b\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u0438 \u0447\u0435\u043a\u2011\u043b\u0438\u0441\u0442, \u0447\u0442\u043e\u0431\u044b \u0432\u0430\u0448 \u0441\u0430\u0439\u0442 \u0431\u044b\u043b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u0435\u043d \u0438 \u043d\u0430\u0434\u0451\u0436\u0435\u043d.<\/p>\n

\u0420\u0430\u0437\u0431\u043e\u0440 \u0437\u0430\u0434\u0430\u0447\u0438<\/h2>\n

SSRF (Server Side Request Forgery) \u2013 \u0430\u0442\u0430\u043a\u0430, \u043a\u043e\u0433\u0434\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0437\u0430\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0432\u0430\u0448 \u0441\u0435\u0440\u0432\u0435\u0440 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0437\u0430\u043f\u0440\u043e\u0441 \u043a \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u043c\u0443 \u0430\u0434\u0440\u0435\u0441\u0443. \u0412 Go\u2011Fiber \u044d\u0442\u043e \u0447\u0430\u0441\u0442\u043e \u0441\u043b\u0443\u0447\u0430\u0435\u0442\u0441\u044f, \u0435\u0441\u043b\u0438 \u0432\u0430\u0448\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0435\u0442 URL \u043e\u0442 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0438 \u0434\u0435\u043b\u0430\u0435\u0442 HTTP\u2011\u0437\u0430\u043f\u0440\u043e\u0441 \u043a \u043d\u0435\u043c\u0443. \u0415\u0441\u043b\u0438 \u043d\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u044b\u0445 \u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0438 \u043d\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0442\u0430\u0439\u043c\u0430\u0443\u0442\u044b, \u0441\u0435\u0440\u0432\u0435\u0440 \u043c\u043e\u0436\u0435\u0442 \u0441\u0442\u0430\u0442\u044c \u043f\u0440\u043e\u043a\u0441\u0438 \u0434\u043b\u044f \u0432\u043d\u0435\u0448\u043d\u0438\u0445 \u0430\u0442\u0430\u043a. \u0417\u0430\u0434\u0430\u0447\u0430 \u2013 \u0433\u0430\u0440\u0430\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c, \u0447\u0442\u043e \u043a\u0430\u0436\u0434\u044b\u0439 \u0432\u043d\u0435\u0448\u043d\u0438\u0439 \u0437\u0430\u043f\u0440\u043e\u0441 \u0438\u0434\u0451\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u043a \u0440\u0430\u0437\u0440\u0435\u0448\u0451\u043d\u043d\u044b\u043c \u0430\u0434\u0440\u0435\u0441\u0430\u043c, \u0441 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0441\u0445\u0435\u043c\u044b.<\/p>\n

\u041f\u043e\u0448\u0430\u0433\u043e\u0432\u043e\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u0435<\/h2>\n
    \n
  1. \u041e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c whitelist \u0434\u043e\u043c\u0435\u043d\u043e\u0432, \u043a \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0440\u0430\u0437\u0440\u0435\u0448\u0451\u043d \u0434\u043e\u0441\u0442\u0443\u043f. \u042d\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0441\u043f\u0438\u0441\u043e\u043a \u0434\u043e\u043c\u0435\u043d\u043e\u0432, IP\u2011\u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u043e\u0432 \u0438\u043b\u0438 \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u0439.<\/li>\n
  2. \u0421\u043e\u0437\u0434\u0430\u0442\u044c middleware, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0431\u0443\u0434\u0435\u0442 \u0432\u0430\u043b\u0438\u0434\u0438\u0440\u043e\u0432\u0430\u0442\u044c URL \u0438\u0437 \u0437\u0430\u043f\u0440\u043e\u0441\u0430, \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0442\u044c \u0441\u0445\u0435\u043c\u0443 (http\/https), \u0434\u043e\u043c\u0435\u043d \u0438 \u0442\u0430\u0439\u043c\u0430\u0443\u0442.<\/li>\n
  3. \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c context \u0441 \u0442\u0430\u0439\u043c\u0430\u0443\u0442\u043e\u043c \u043f\u0440\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 HTTP\u2011\u0437\u0430\u043f\u0440\u043e\u0441\u0430, \u0447\u0442\u043e\u0431\u044b \u043d\u0435 \u0437\u0430\u0432\u0438\u0441\u0430\u0442\u044c \u043d\u0430 \u0432\u043d\u0435\u0448\u043d\u0438\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u0445.<\/li>\n
  4. \u041b\u043e\u0433\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u044b, \u0447\u0442\u043e\u0431\u044b \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u043e\u0442\u0441\u043b\u0435\u0434\u0438\u0442\u044c \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u043e\u0431\u0445\u043e\u0434\u0430.<\/li>\n<\/ol>\n

    \u0420\u0430\u0431\u043e\u0447\u0438\u0439 \u043a\u043e\u0434<\/h2>\n
    package main<\/p>\n
    import (
    \n    \"context\"
    \n    \"errors\"
    \n    \"fmt\"
    \n    \"net\"
    \n    \"net\/http\"
    \n    \"net\/url\"
    \n    \"strings\"
    \n    \"time\"<\/p>\n
        \"github.com\/gofiber\/fiber\/v2\"
    \n)<\/p>\n
    \/\/ whitelist \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0434\u043e\u043c\u0435\u043d\u044b, \u043a \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0440\u0430\u0437\u0440\u0435\u0448\u0451\u043d \u0434\u043e\u0441\u0442\u0443\u043f
    \nvar whitelist = []string{\"example.com\", \"api.service.com\"}<\/p>\n
    \/\/ isAllowed \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442, \u043f\u0440\u0438\u043d\u0430\u0434\u043b\u0435\u0436\u0438\u0442 \u043b\u0438 URL \u0434\u043e\u043c\u0435\u043d\u0443 \u0438\u0437 whitelist
    \nfunc isAllowed(u *url.URL) bool {
    \n    host := strings.Split(u.Host, \":\")[0] \/\/ \u0443\u0431\u0438\u0440\u0430\u0435\u043c \u043f\u043e\u0440\u0442
    \n    for _, d := range whitelist {
    \n        if strings.EqualFold(host, d) {
    \n            return true
    \n        }
    \n    }
    \n    return false
    \n}<\/p>\n
    \/\/ requestWithTimeout \u0434\u0435\u043b\u0430\u0435\u0442 GET\u2011\u0437\u0430\u043f\u0440\u043e\u0441 \u0441 \u0442\u0430\u0439\u043c\u0430\u0443\u0442\u043e\u043c 5 \u0441\u0435\u043a
    \nfunc requestWithTimeout(ctx context.Context, target string) (*http.Response, error) {
    \n    req, err := http.NewRequestWithContext(ctx, \"GET\", target, nil)
    \n    if err != nil {
    \n        return nil, err
    \n    }
    \n    client := &http.Client{Timeout: 5 * time.Second}
    \n    return client.Do(req)
    \n}<\/p>\n
    func main() {
    \n    app := fiber.New()<\/p>\n
        app.Get(\"\/proxy\", func(c *fiber.Ctx) error {
    \n        \/\/ 1. \u041f\u043e\u043b\u0443\u0447\u0430\u0435\u043c URL \u0438\u0437 query\u2011\u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430
    \n        rawURL := c.Query(\"url\")
    \n        if rawURL == \"\" {
    \n            return c.Status(fiber.StatusBadRequest).SendString(\"url param missing\")
    \n        }<\/p>\n
            \/\/ 2. \u041f\u0430\u0440\u0441\u0438\u043c URL
    \n        u, err := url.Parse(rawURL)
    \n        if err != nil {
    \n            return c.Status(fiber.StatusBadRequest).SendString(\"invalid url\")
    \n        }<\/p>\n
            \/\/ 3. \u041f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u043c \u0441\u0445\u0435\u043c\u0443
    \n        if u.Scheme != \"http\" && u.Scheme != \"https\" {
    \n            return c.Status(fiber.StatusBadRequest).SendString(\"only http\/https allowed\")
    \n        }<\/p>\n
            \/\/ 4. \u041f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u043c whitelist
    \n        if !isAllowed(u) {
    \n            return c.Status(fiber.StatusForbidden).SendString(\"domain not allowed\")
    \n        }<\/p>\n
            \/\/ 5. \u0412\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u043c \u0437\u0430\u043f\u0440\u043e\u0441 \u0441 \u0442\u0430\u0439\u043c\u0430\u0443\u0442\u043e\u043c
    \n        ctx, cancel := context.WithTimeout(context.Background(), 5*time.Second)
    \n        defer cancel()<\/p>\n
            resp, err := requestWithTimeout(ctx, u.String())
    \n        if err != nil {
    \n            \/\/ \u041b\u043e\u0433\u0438\u0440\u0443\u0435\u043c \u043e\u0448\u0438\u0431\u043a\u0443, \u043d\u043e \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0435\u043c \u0434\u0435\u0442\u0430\u043b\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0443
    \n            fmt.Printf(\"SSRF attempt: %sn\", err)
    \n            return c.Status(fiber.StatusBadGateway).SendString(\"external service error\")
    \n        }
    \n        defer resp.Body.Close()<\/p>\n
            \/\/ 6. \u041f\u0435\u0440\u0435\u0434\u0430\u0451\u043c \u0442\u0435\u043b\u043e \u043e\u0442\u0432\u0435\u0442\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0443
    \n        return c.Status(resp.StatusCode).Stream(func(w fiber.ResponseWriter) {
    \n            io.Copy(w, resp.Body)
    \n        })
    \n    })<\/p>\n
        app.Listen(\":3000\")
    \n}<\/p>\n","protected":false},"excerpt":{"rendered":"
    \u0423\u0437\u043d\u0430\u0439\u0442\u0435, \u043a\u0430\u043a \u0432 Go\u2011Fiber \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 \u043e\u0442 SSRF \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e whitelist\u2011\u043e\u0432, \u0442\u0430\u0439\u043c\u0430\u0443\u0442\u043e\u0432 \u0438 \u0432\u0430\u043b\u0438\u0434\u0430\u0446\u0438\u0438 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u041f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u043e + \u043a\u043e\u0434.<\/p>\n","protected":false},"author":2,"featured_media":249,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[43,1],"tags":[150,149,151],"class_list":["post-247","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-coding","category-about-all","tag-fiber","tag-golang","tag-ssrf"],"yoast_head":"\ngolang fiber ssrf protection: \u043a\u0430\u043a \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u0441\u0430\u0439\u0442 \u043e\u0442 SSRF - CODESHOT - \u041f\u043e\u043b\u0435\u0437\u043d\u044b\u0439 \u043a\u043e\u0434<\/title>\n<meta name=\"description\" content=\"\u0423\u0437\u043d\u0430\u0439\u0442\u0435, \u043a\u0430\u043a \u0432 Go\u2011Fiber \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 \u043e\u0442 SSRF \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e whitelist\u2011\u043e\u0432, \u0442\u0430\u0439\u043c\u0430\u0443\u0442\u043e\u0432 \u0438 \u0432\u0430\u043b\u0438\u0434\u0430\u0446\u0438\u0438 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u041f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u043e + \u043a\u043e\u0434.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/codeshot.ru\/?p=247\" \/>\n<meta property=\"og:locale\" content=\"ru_RU\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"golang fiber ssrf protection: \u043a\u0430\u043a \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u0441\u0430\u0439\u0442 \u043e\u0442 SSRF - CODESHOT - \u041f\u043e\u043b\u0435\u0437\u043d\u044b\u0439 \u043a\u043e\u0434\" \/>\n<meta property=\"og:description\" content=\"\u0423\u0437\u043d\u0430\u0439\u0442\u0435, \u043a\u0430\u043a \u0432 Go\u2011Fiber \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 \u043e\u0442 SSRF \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e whitelist\u2011\u043e\u0432, \u0442\u0430\u0439\u043c\u0430\u0443\u0442\u043e\u0432 \u0438 \u0432\u0430\u043b\u0438\u0434\u0430\u0446\u0438\u0438 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u041f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u043e + \u043a\u043e\u0434.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/codeshot.ru\/?p=247\" \/>\n<meta property=\"og:site_name\" content=\"CODESHOT - \u041f\u043e\u043b\u0435\u0437\u043d\u044b\u0439 \u043a\u043e\u0434\" \/>\n<meta property=\"article:published_time\" content=\"2026-09-27T17:02:33+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/codeshot.ru\/wp-content\/uploads\/2026\/09\/golang-fiber-ssrf-protection-d0bad0b0d0ba-d0b7d0b0d189d0b8d182d0b8d182d18c-d181d0b0d0b9d182-d0bed182-ssrf.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1024\" \/>\n\t<meta property=\"og:image:height\" content=\"576\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"\u0410\u043d\u0442\u043e\u043d \u0418\u0432\u0430\u043d\u043e\u0432\u0438\u0447\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u041d\u0430\u043f\u0438\u0441\u0430\u043d\u043e \u0430\u0432\u0442\u043e\u0440\u043e\u043c\" \/>\n\t<meta name=\"twitter:data1\" content=\"\u0410\u043d\u0442\u043e\u043d \u0418\u0432\u0430\u043d\u043e\u0432\u0438\u0447\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u041f\u0440\u0438\u043c\u0435\u0440\u043d\u043e\u0435 \u0432\u0440\u0435\u043c\u044f \u0434\u043b\u044f \u0447\u0442\u0435\u043d\u0438\u044f\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 \u043c\u0438\u043d\u0443\u0442\u0430\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/codeshot.ru\/?p=247#article\",\"isPartOf\":{\"@id\":\"https:\/\/codeshot.ru\/?p=247\"},\"author\":{\"name\":\"\u0410\u043d\u0442\u043e\u043d \u0418\u0432\u0430\u043d\u043e\u0432\u0438\u0447\",\"@id\":\"https:\/\/codeshot.ru\/#\/schema\/person\/ae4675b745dd574854e37ce5240ecace\"},\"headline\":\"golang fiber ssrf protection: \u043a\u0430\u043a \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u0441\u0430\u0439\u0442 \u043e\u0442 SSRF\",\"datePublished\":\"2026-09-27T17:02:33+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/codeshot.ru\/?p=247\"},\"wordCount\":464,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/codeshot.ru\/#organization\"},\"image\":{\"@id\":\"https:\/\/codeshot.ru\/?p=247#primaryimage\"},\"thumbnailUrl\":\"https:\/\/codeshot.ru\/wp-content\/uploads\/2026\/09\/golang-fiber-ssrf-protection-d0bad0b0d0ba-d0b7d0b0d189d0b8d182d0b8d182d18c-d181d0b0d0b9d182-d0bed182-ssrf.jpg\",\"keywords\":[\"fiber\",\"golang\",\"ssrf\"],\"articleSection\":[\"Coding\",\"\u041e\u0431\u043e \u0432\u0441\u0451\u043c\"],\"inLanguage\":\"ru-RU\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/codeshot.ru\/?p=247#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/codeshot.ru\/?p=247\",\"url\":\"https:\/\/codeshot.ru\/?p=247\",\"name\":\"golang fiber ssrf protection: \u043a\u0430\u043a \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u0441\u0430\u0439\u0442 \u043e\u0442 SSRF - CODESHOT - \u041f\u043e\u043b\u0435\u0437\u043d\u044b\u0439 \u043a\u043e\u0434\",\"isPartOf\":{\"@id\":\"https:\/\/codeshot.ru\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/codeshot.ru\/?p=247#primaryimage\"},\"image\":{\"@id\":\"https:\/\/codeshot.ru\/?p=247#primaryimage\"},\"thumbnailUrl\":\"https:\/\/codeshot.ru\/wp-content\/uploads\/2026\/09\/golang-fiber-ssrf-protection-d0bad0b0d0ba-d0b7d0b0d189d0b8d182d0b8d182d18c-d181d0b0d0b9d182-d0bed182-ssrf.jpg\",\"datePublished\":\"2026-09-27T17:02:33+00:00\",\"description\":\"\u0423\u0437\u043d\u0430\u0439\u0442\u0435, \u043a\u0430\u043a \u0432 Go\u2011Fiber \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 \u043e\u0442 SSRF \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e whitelist\u2011\u043e\u0432, \u0442\u0430\u0439\u043c\u0430\u0443\u0442\u043e\u0432 \u0438 \u0432\u0430\u043b\u0438\u0434\u0430\u0446\u0438\u0438 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u041f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u043e + \u043a\u043e\u0434.\",\"breadcrumb\":{\"@id\":\"https:\/\/codeshot.ru\/?p=247#breadcrumb\"},\"inLanguage\":\"ru-RU\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/codeshot.ru\/?p=247\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"ru-RU\",\"@id\":\"https:\/\/codeshot.ru\/?p=247#primaryimage\",\"url\":\"https:\/\/codeshot.ru\/wp-content\/uploads\/2026\/09\/golang-fiber-ssrf-protection-d0bad0b0d0ba-d0b7d0b0d189d0b8d182d0b8d182d18c-d181d0b0d0b9d182-d0bed182-ssrf.jpg\",\"contentUrl\":\"https:\/\/codeshot.ru\/wp-content\/uploads\/2026\/09\/golang-fiber-ssrf-protection-d0bad0b0d0ba-d0b7d0b0d189d0b8d182d0b8d182d18c-d181d0b0d0b9d182-d0bed182-ssrf.jpg\",\"width\":1024,\"height\":576},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/codeshot.ru\/?p=247#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u0413\u043b\u0430\u0432\u043d\u0430\u044f \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430\",\"item\":\"https:\/\/codeshot.ru\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"golang fiber ssrf protection: \u043a\u0430\u043a \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u0441\u0430\u0439\u0442 \u043e\u0442 SSRF\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/codeshot.ru\/#website\",\"url\":\"https:\/\/codeshot.ru\/\",\"name\":\"CODESHOT - \u041f\u043e\u043b\u0435\u0437\u043d\u044b\u0439 \u043a\u043e\u0434\",\"description\":\"\u0420\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0439 \u043a\u043e\u0434 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c, \u0441\u0430\u0439\u0442\u043e\u0432, \u043c\u043e\u0431\u0438\u043b\u043e\u043a \u0438 \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432!\",\"publisher\":{\"@id\":\"https:\/\/codeshot.ru\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/codeshot.ru\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"ru-RU\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/codeshot.ru\/#organization\",\"name\":\"CODESHOT - \u041f\u043e\u043b\u0435\u0437\u043d\u044b\u0439 \u043a\u043e\u0434\",\"url\":\"https:\/\/codeshot.ru\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"ru-RU\",\"@id\":\"https:\/\/codeshot.ru\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/codeshot.ru\/wp-content\/uploads\/2025\/04\/logo-agency.png\",\"contentUrl\":\"https:\/\/codeshot.ru\/wp-content\/uploads\/2025\/04\/logo-agency.png\",\"width\":200,\"height\":200,\"caption\":\"CODESHOT - \u041f\u043e\u043b\u0435\u0437\u043d\u044b\u0439 \u043a\u043e\u0434\"},\"image\":{\"@id\":\"https:\/\/codeshot.ru\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/codeshot.ru\/#\/schema\/person\/ae4675b745dd574854e37ce5240ecace\",\"name\":\"\u0410\u043d\u0442\u043e\u043d \u0418\u0432\u0430\u043d\u043e\u0432\u0438\u0447\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"ru-RU\",\"@id\":\"https:\/\/codeshot.ru\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/12cc23cc07df127aea83020242b93fad313980fe7ec7ae6915395c9e002a891f?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/12cc23cc07df127aea83020242b93fad313980fe7ec7ae6915395c9e002a891f?s=96&d=mm&r=g\",\"caption\":\"\u0410\u043d\u0442\u043e\u043d \u0418\u0432\u0430\u043d\u043e\u0432\u0438\u0447\"},\"url\":\"https:\/\/codeshot.ru\/?author=2\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"golang fiber ssrf protection: \u043a\u0430\u043a \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u0441\u0430\u0439\u0442 \u043e\u0442 SSRF - CODESHOT - \u041f\u043e\u043b\u0435\u0437\u043d\u044b\u0439 \u043a\u043e\u0434","description":"\u0423\u0437\u043d\u0430\u0439\u0442\u0435, \u043a\u0430\u043a \u0432 Go\u2011Fiber \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 \u043e\u0442 SSRF \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e whitelist\u2011\u043e\u0432, \u0442\u0430\u0439\u043c\u0430\u0443\u0442\u043e\u0432 \u0438 \u0432\u0430\u043b\u0438\u0434\u0430\u0446\u0438\u0438 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u041f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u043e + \u043a\u043e\u0434.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/codeshot.ru\/?p=247","og_locale":"ru_RU","og_type":"article","og_title":"golang fiber ssrf protection: \u043a\u0430\u043a \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u0441\u0430\u0439\u0442 \u043e\u0442 SSRF - CODESHOT - \u041f\u043e\u043b\u0435\u0437\u043d\u044b\u0439 \u043a\u043e\u0434","og_description":"\u0423\u0437\u043d\u0430\u0439\u0442\u0435, \u043a\u0430\u043a \u0432 Go\u2011Fiber \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 \u043e\u0442 SSRF \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e whitelist\u2011\u043e\u0432, \u0442\u0430\u0439\u043c\u0430\u0443\u0442\u043e\u0432 \u0438 \u0432\u0430\u043b\u0438\u0434\u0430\u0446\u0438\u0438 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u041f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u043e + \u043a\u043e\u0434.","og_url":"https:\/\/codeshot.ru\/?p=247","og_site_name":"CODESHOT - \u041f\u043e\u043b\u0435\u0437\u043d\u044b\u0439 \u043a\u043e\u0434","article_published_time":"2026-09-27T17:02:33+00:00","og_image":[{"width":1024,"height":576,"url":"https:\/\/codeshot.ru\/wp-content\/uploads\/2026\/09\/golang-fiber-ssrf-protection-d0bad0b0d0ba-d0b7d0b0d189d0b8d182d0b8d182d18c-d181d0b0d0b9d182-d0bed182-ssrf.jpg","type":"image\/jpeg"}],"author":"\u0410\u043d\u0442\u043e\u043d \u0418\u0432\u0430\u043d\u043e\u0432\u0438\u0447","twitter_card":"summary_large_image","twitter_misc":{"\u041d\u0430\u043f\u0438\u0441\u0430\u043d\u043e \u0430\u0432\u0442\u043e\u0440\u043e\u043c":"\u0410\u043d\u0442\u043e\u043d \u0418\u0432\u0430\u043d\u043e\u0432\u0438\u0447","\u041f\u0440\u0438\u043c\u0435\u0440\u043d\u043e\u0435 \u0432\u0440\u0435\u043c\u044f \u0434\u043b\u044f \u0447\u0442\u0435\u043d\u0438\u044f":"1 \u043c\u0438\u043d\u0443\u0442\u0430"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/codeshot.ru\/?p=247#article","isPartOf":{"@id":"https:\/\/codeshot.ru\/?p=247"},"author":{"name":"\u0410\u043d\u0442\u043e\u043d \u0418\u0432\u0430\u043d\u043e\u0432\u0438\u0447","@id":"https:\/\/codeshot.ru\/#\/schema\/person\/ae4675b745dd574854e37ce5240ecace"},"headline":"golang fiber ssrf protection: \u043a\u0430\u043a \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u0441\u0430\u0439\u0442 \u043e\u0442 SSRF","datePublished":"2026-09-27T17:02:33+00:00","mainEntityOfPage":{"@id":"https:\/\/codeshot.ru\/?p=247"},"wordCount":464,"commentCount":0,"publisher":{"@id":"https:\/\/codeshot.ru\/#organization"},"image":{"@id":"https:\/\/codeshot.ru\/?p=247#primaryimage"},"thumbnailUrl":"https:\/\/codeshot.ru\/wp-content\/uploads\/2026\/09\/golang-fiber-ssrf-protection-d0bad0b0d0ba-d0b7d0b0d189d0b8d182d0b8d182d18c-d181d0b0d0b9d182-d0bed182-ssrf.jpg","keywords":["fiber","golang","ssrf"],"articleSection":["Coding","\u041e\u0431\u043e \u0432\u0441\u0451\u043c"],"inLanguage":"ru-RU","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/codeshot.ru\/?p=247#respond"]}]},{"@type":"WebPage","@id":"https:\/\/codeshot.ru\/?p=247","url":"https:\/\/codeshot.ru\/?p=247","name":"golang fiber ssrf protection: \u043a\u0430\u043a \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u0441\u0430\u0439\u0442 \u043e\u0442 SSRF - CODESHOT - \u041f\u043e\u043b\u0435\u0437\u043d\u044b\u0439 \u043a\u043e\u0434","isPartOf":{"@id":"https:\/\/codeshot.ru\/#website"},"primaryImageOfPage":{"@id":"https:\/\/codeshot.ru\/?p=247#primaryimage"},"image":{"@id":"https:\/\/codeshot.ru\/?p=247#primaryimage"},"thumbnailUrl":"https:\/\/codeshot.ru\/wp-content\/uploads\/2026\/09\/golang-fiber-ssrf-protection-d0bad0b0d0ba-d0b7d0b0d189d0b8d182d0b8d182d18c-d181d0b0d0b9d182-d0bed182-ssrf.jpg","datePublished":"2026-09-27T17:02:33+00:00","description":"\u0423\u0437\u043d\u0430\u0439\u0442\u0435, \u043a\u0430\u043a \u0432 Go\u2011Fiber \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 \u043e\u0442 SSRF \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e whitelist\u2011\u043e\u0432, \u0442\u0430\u0439\u043c\u0430\u0443\u0442\u043e\u0432 \u0438 \u0432\u0430\u043b\u0438\u0434\u0430\u0446\u0438\u0438 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u041f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u043e + \u043a\u043e\u0434.","breadcrumb":{"@id":"https:\/\/codeshot.ru\/?p=247#breadcrumb"},"inLanguage":"ru-RU","potentialAction":[{"@type":"ReadAction","target":["https:\/\/codeshot.ru\/?p=247"]}]},{"@type":"ImageObject","inLanguage":"ru-RU","@id":"https:\/\/codeshot.ru\/?p=247#primaryimage","url":"https:\/\/codeshot.ru\/wp-content\/uploads\/2026\/09\/golang-fiber-ssrf-protection-d0bad0b0d0ba-d0b7d0b0d189d0b8d182d0b8d182d18c-d181d0b0d0b9d182-d0bed182-ssrf.jpg","contentUrl":"https:\/\/codeshot.ru\/wp-content\/uploads\/2026\/09\/golang-fiber-ssrf-protection-d0bad0b0d0ba-d0b7d0b0d189d0b8d182d0b8d182d18c-d181d0b0d0b9d182-d0bed182-ssrf.jpg","width":1024,"height":576},{"@type":"BreadcrumbList","@id":"https:\/\/codeshot.ru\/?p=247#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u0413\u043b\u0430\u0432\u043d\u0430\u044f \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430","item":"https:\/\/codeshot.ru\/"},{"@type":"ListItem","position":2,"name":"golang fiber ssrf protection: \u043a\u0430\u043a \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u0441\u0430\u0439\u0442 \u043e\u0442 SSRF"}]},{"@type":"WebSite","@id":"https:\/\/codeshot.ru\/#website","url":"https:\/\/codeshot.ru\/","name":"CODESHOT - \u041f\u043e\u043b\u0435\u0437\u043d\u044b\u0439 \u043a\u043e\u0434","description":"\u0420\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0439 \u043a\u043e\u0434 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c, \u0441\u0430\u0439\u0442\u043e\u0432, \u043c\u043e\u0431\u0438\u043b\u043e\u043a \u0438 \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432!","publisher":{"@id":"https:\/\/codeshot.ru\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/codeshot.ru\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"ru-RU"},{"@type":"Organization","@id":"https:\/\/codeshot.ru\/#organization","name":"CODESHOT - \u041f\u043e\u043b\u0435\u0437\u043d\u044b\u0439 \u043a\u043e\u0434","url":"https:\/\/codeshot.ru\/","logo":{"@type":"ImageObject","inLanguage":"ru-RU","@id":"https:\/\/codeshot.ru\/#\/schema\/logo\/image\/","url":"https:\/\/codeshot.ru\/wp-content\/uploads\/2025\/04\/logo-agency.png","contentUrl":"https:\/\/codeshot.ru\/wp-content\/uploads\/2025\/04\/logo-agency.png","width":200,"height":200,"caption":"CODESHOT - \u041f\u043e\u043b\u0435\u0437\u043d\u044b\u0439 \u043a\u043e\u0434"},"image":{"@id":"https:\/\/codeshot.ru\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/codeshot.ru\/#\/schema\/person\/ae4675b745dd574854e37ce5240ecace","name":"\u0410\u043d\u0442\u043e\u043d \u0418\u0432\u0430\u043d\u043e\u0432\u0438\u0447","image":{"@type":"ImageObject","inLanguage":"ru-RU","@id":"https:\/\/codeshot.ru\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/12cc23cc07df127aea83020242b93fad313980fe7ec7ae6915395c9e002a891f?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/12cc23cc07df127aea83020242b93fad313980fe7ec7ae6915395c9e002a891f?s=96&d=mm&r=g","caption":"\u0410\u043d\u0442\u043e\u043d \u0418\u0432\u0430\u043d\u043e\u0432\u0438\u0447"},"url":"https:\/\/codeshot.ru\/?author=2"}]}},"_links":{"self":[{"href":"https:\/\/codeshot.ru\/index.php?rest_route=\/wp\/v2\/posts\/247","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/codeshot.ru\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/codeshot.ru\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/codeshot.ru\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/codeshot.ru\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=247"}],"version-history":[{"count":0,"href":"https:\/\/codeshot.ru\/index.php?rest_route=\/wp\/v2\/posts\/247\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/codeshot.ru\/index.php?rest_route=\/wp\/v2\/media\/249"}],"wp:attachment":[{"href":"https:\/\/codeshot.ru\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=247"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/codeshot.ru\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=247"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/codeshot.ru\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=247"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}