Safely inject credentials in HTTP headers with Vercel Sandbox - Vercel
vercel.com · 563 words · saved by 1 readers
Sandbox network policies now support HTTP header injection to prevent secrets exfiltration by untrusted code
Vercel Sandbox can now automatically inject HTTP headers into outbound requests from sandboxed code. This keeps API keys and tokens safely outside the sandbox VM boundary, so apps running inside the sandbox can call authenticated services without ever accessing the credentials. Header injection is configured as part of the network policy using transform . When the sandbox makes an HTTPS request to a matching domain, the firewall adds or replaces the specified headers before forwarding the request. 1 const sandbox = await Sandbox . create ( { 2 timeout : 300_000 , 3 networkPolicy : { 4 allow :
related reading
- Vercel Sandboxvercel.com
- Sandbox SDKsandbox.cloudflare.com
- PostHog – We make your product self-drivingposthog.com
- The Indytheindy.org
- alefone - Overview – Vercelvercel.com
- v0 by Vercel - Build Full-Stack Web Apps with AIv0.dev
- Cookbookcookbook.openai.com
- Bolt AI builder: Websites, apps & prototypesbolt.new
- OpenAI Platformplatform.openai.com
- Daytona - Secure Infrastructure for Running AI-Generated Codedaytona.io
- Lakera – Test your AI hacking skillsgandalf.lakera.ai
- GitHub · Change is constant. GitHub keeps you ahead.github.com