How Grafana's No-Op Validator Turns Anonymous Access Into Pre-Auth SSRF
TL;DR Grafana OSS ships a no-op request validator for the datasource proxy endpoint. It always returns nil. Zero SSRF …
burnedsignal
Exposing what was meant to stay hidden
Deep dives into cybersecurity, intelligence, and digital privacy.
$ cat signal.log
[INTERCEPTED] encrypted_channel_42
[DECODED] payload extracted
[SIGNAL] burned.
$ _