# ------------------------------------------------
# CITATION.cff file created with {cffr} R package
# See also: https://docs.ropensci.org/cffr/
# ------------------------------------------------
 
cff-version: 1.2.0
message: 'To cite package "ssrfr" in publications use:'
type: software
license: MIT
title: 'ssrfr: Server-Side Request Forgery Guard for Outbound Requests'
version: 0.0.0.9000
identifiers:
- type: doi
  value: 10.32614/CRAN.package.ssrfr
- type: url
  value: https://bart-turczynski.r-universe.dev/ssrfr
abstract: Protects R applications that fetch URLs an attacker can influence from server-side
  request forgery. Each redirect hop is parsed once, resolved once, and every resolved
  address is classified before the connection is pinned to a validated address, so
  a hostname cannot be rebound between check and connect. Refusals carry stable reason
  codes. Provides the guarded fetch of each hop of a redirect chain, a helper that
  follows a whole chain, structural inspection of a URL without network access, and
  resolved inspection of every address a name resolves to.
authors:
- family-names: Turczynski
  given-names: Bart
  email: bartek@turczynski.pl
  orcid: https://orcid.org/0000-0002-8788-7980
preferred-citation:
  type: manual
  title: 'ssrfr: Server-Side Request Forgery Guard for Outbound Requests'
  authors:
  - family-names: Turczynski
    given-names: Bart
    orcid: https://orcid.org/0000-0002-8788-7980
    email: bartek@turczynski.pl
  year: '2026'
  notes: R package version 0.0.0.9000
  url: https://gitlab.com/bart-turczynski/ssrfr
repository: https://bart-turczynski.r-universe.dev
repository-code: https://gitlab.com/bart-turczynski/ssrfr
commit: 9933fe693b815312383c9c60accb3584fd02172b
url: https://bart-turczynski.gitlab.io/ssrfr/
date-released: '2026-10-12'
contact:
- family-names: Turczynski
  given-names: Bart
  email: bartek@turczynski.pl
  orcid: https://orcid.org/0000-0002-8788-7980
keywords:
- ssrf
- server-side-request-forgery
- url-validation
- ip-address
- dns-rebinding
- cloud-metadata
- redirects
- libcurl
- security