Referring to the CloudFlare email variables
Referring to the CloudFlare email variables
message.raw into a Response object to parse it as text
fetch to user-provided URLs? I'm so used to that being a disaster in terms of SSRF that it feels wrong, but I think with workers it should be safe?First, we can now restrict the global fetch() function to accept only publicly-routable URLs. This makes applications totally immune to SSRF attacks! You cannot trick an application into accessing an internal service unintentionally if the code to access internal services is explicitly different.



message.raw