Question

Quelle condition complète correctement la vérification pour empêcher une attaque SSRF (Server-Side Request Forgery) ?

```
import requests
from urllib.parse import urlparse

ALLOWED_DOMAINS = {'api.service.com', 'internal.data.local'}

def fetch_resource(user_url):
    parsed = urlparse(user_url)
    if ______________:
        return requests.get(user_url).text
    raise ValueError("Domaine non autorisé")
```

Accepted Answer

parsed.netloc in ALLOWED_DOMAINS is true

Answer

parsed.scheme in ['http', 'https'] is true

Answer

user_url.startswith('http') is true

Answer

len(user_url) < 2048 is true

Question from the Cyber Security test