API Design · Senior · Question 15 of 75
What are risks of sending webhooks to arbitrary customer-provided URLs?
- 1Customers might receive too much data
- 2None, outgoing requests are always safe
- ✓Correct answer: SSRF into internal networks, and slow or malicious endpoints tying up workers; validate destinations, block private ranges and enforce timeouts
Explanation
Send webhooks from isolated egress infrastructure with strict network rules.