How We Audited a High-Traffic Ruby Enterprise Stack on Linode and Mitigated Server-Side Request Forgery (SSRF) in webhook parsers
Initial Audit Scope and Methodology Our engagement focused on a high-traffic Ruby on Rails enterprise application hosted on Linode. The primary objective was to identify and mitigate security vulnerabilities, with a specific emphasis on Server-Side Request Forgery (SSRF) within webhook processing. Our methodology involved a multi-pronged approach: static code analysis, dynamic security testing, infrastructure review, […]