Blog
Mert Özen's blog posts on software development, backend, frontend, and DevOps.
API7 and API10: APIs That Talk to the Outside World — Webhooks, Outbound URL Validation and Not Trusting Third-Party Responses
You validate a user-supplied webhook URL by shape at registration and, at connect time, on every resolved address with SocketsHttpHandler.ConnectCallback, and you treat third-party responses like user input. A DNS rebinding imitation, delivery without redirects, a signed payment webhook processed once, and a shipping API response validated with a size limit and resilience.
Jenkins Multibranch Pipelines and GitHub Integration: Webhooks, PR Builds and Status Checks
A multibranch pipeline opens a job automatically for every branch and PR; a webhook starts the build within seconds and the result returns to the commit as a status check. Branch source traits, a webhook blocked by a localhost URL and Gitea's SSRF protection, telling branches and PRs apart with when, a fork PR's Jenkinsfile read from the base branch, required checks, and a GitHub App instead of a PAT.