Shopify makes IP allowlisting mandatory for all public apps to curb stolen token abuse
POLICYShopifyredteam/daily · 1 source
- Severity
- Low
- Sources
- 1
What happened
Shopify is requiring every public app that connects to its platform to restrict access to a list of approved internet addresses. This is meant to stop criminals who steal access keys from misusing them. The new rules take effect in stages, with the first starting on 12 November.
Like I’m new · Written by AI from 1 source · Wrong?
What to do
- Developers of public Shopify apps should specify the public IP addresses their apps use.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
GBHackers
Who and what is in it
Companies