API-Induced SSRF - How Apple Pay Scattered Vulnerabilities Across the Web

Explore how top companies struggle with defensive programming through an examination of API-induced Server-Side Request Forgery (SSRF) vulnerabilities, focusing on Apple Pay's impact across the web. Delve into demonstrations of affected software, analyze Apple's response, and discover actionable strategies for enhancing API security. Learn about the implications for webhooks and gain insights into rethinking API security practices to prevent similar vulnerabilities in the future.

Introduction
Overview
Apple Pay Web
Google Chrome Labs
Apples Response
Webhooks
Demo
Apple