SSRF in PDF and HTML Rendering Pipelines: What Puppeteer-Style Services Get Wrong

Originally published at https://koltesecurity.com on May 23, 2026.