{"id":110728,"date":"2023-10-11T03:10:14","date_gmt":"2023-10-11T01:10:14","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-protokole-http-2-zadejstvovannaya-v-krupnejshej-ddos-atake"},"modified":"2023-10-11T03:10:14","modified_gmt":"2023-10-11T01:10:14","slug":"uyazvimost-v-protokole-http-2-zadejstvovannaya-v-krupnejshej-ddos-atake","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hr\/blog\/news\/uyazvimost-v-protokole-http-2-zadejstvovannaya-v-krupnejshej-ddos-atake","title":{"rendered":"Ranljivost u HTTP\/2 protokolu kori\u0161tena u najve\u0107em DDoS napadu","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Tvrtka Google zabilje\u017eila je najve\u0107i DDoS napad na svoju infrastrukturu, \u010dija je intenzivnost iznosila 398 milijuna zahtjeva u sekundi. Novi napad sedam puta prema\u0161uje intenzitet prethodnog rekordnog DDoS napada, u kojem su napada\u010di uspjeli stvoriti protok od 47 milijuna zahtjeva u sekundi. Za usporedbu, ukupni promet na cijelom Webu procjenjuje se na razini od 1-3 milijarde zahtjeva u sekundi. Osim Googlea, napad su tako\u0111er do\u017eivjeli tvrtke Amazon i Cloudflare. Mogu\u0107nost izvo\u0111enja novog napada povezana je s otkrivanjem ranjivosti u HTTP\/2 protokolu (CVE-2023-44487), koja omogu\u0107ava slanje ogromnog protoka zahtjeva na poslu\u017eitelj uz minimalno optere\u0107enje klijenta.      <\/p>\n<p>Nova tehnika napada poznata je kao \u201eRapid Reset\u201c i koristi mogu\u0107nosti koje pru\u017ea multiplexing u HTTP\/2, omogu\u0107uju\u0107i formiranje toka zahtjeva unutar ve\u0107 uspostavljene veze, bez otvaranja novih mre\u017enih veza i bez \u010dekanja na potvrdu primitka paketa. Ova ranjivost se smatra posljedicom nedostataka u HTTP\/2 protokolu, u \u010dijoj se specifikaciji navodi da prilikom poku\u0161aja otvaranja prevelikog broja tokova, treba poni\u0161titi samo tokove koji prema\u0161uju limit, a ne zatvoriti cijelu mre\u017enu vezu.        <\/p>\n<p>Sli\u010dno ranije primijenjenim metodama izvo\u0111enja napada na HTTP\/2, novi napad tako\u0111er stvara veliki broj tokova unutar jedne veze. Klju\u010dna razlika novog napada je \u0161to umjesto \u010dekanja na odgovor, odmah nakon svakog poslanog zahtjeva dolazi okvir s RST_STREAM oznakom, koji odmah poni\u0161tava zahtjev. Poni\u0161tavanje zahtjeva u ranoj fazi omogu\u0107ava eliminaciju povratnog prometa prema klijentu i zaobila\u017eenje ograni\u010denja prisutnih na HTTP poslu\u017eiteljima koja se odnose na maksimalni mogu\u0107i broj tokova koji se istovremeno otvaraju unutar jedne veze putem HTTP\/2. Tako, u novom napadu, volumen zahtjeva upu\u0107enih HTTP poslu\u017eitelju prestaje ovisiti o ka\u0161njenju izme\u0111u slanja zahtjeva i primanja odgovora (RTT, round-trip time) i oslanja se samo na propusnost komunikacijskog kanala.      <center><img decoding=\"async\" alt=\"Ranljivost u HTTP\/2 protokolu kori\u0161tena u najve\u0107em DDoS napadu\" src=\"\/wp-content\/uploads\/2023\/10\/0e8d8610f924902b1e9a07d8ea538223.png\" style=\"display:block;margin: 0 auto;\" \/><\/center>    <\/p>\n<p>Budu\u0107i da je za napad na strani klijenta dovoljno samo slati zahtjeve bez primanja odgovora, napad se mo\u017ee provesti uz minimalne tro\u0161kove. Na primjer, napad koji je zabilje\u017eila tvrtka Cloudflare s 201 milijun zahtjeva u sekundi proveden je uz pomo\u0107 relativno malog botneta od 20 tisu\u0107a ra\u010dunala. Na strani <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/hr\/server\/dts-los-angeles\/\"   title=\"poslu\u017eitelja\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"3723\">poslu\u017eitelja<\/a> tro\u0161kovi obrade dolaznih zahtjeva su znatno vi\u0161i, unato\u010d njihovom otkazivanju, jer je potrebno izvr\u0161iti radnje poput alokacije struktura podataka za nove protoke, parsiranje zahtjeva, dekompresiju zaglavlja i uskla\u0111ivanje URL-a s resursom. U napadu na obrnute proksije, napad se mo\u017ee pro\u0161iriti na backend sustave, jer proksija mo\u017ee uspjeti preusmjeriti zahtjev na backend prije nego \u0161to obradi RST_STREAM okvir.        <\/p>\n<p>Napad se mo\u017ee izvesti samo na ranjive poslu\u017eitelje koji podr\u017eavaju HTTP\/2 (skripta za provjeru manifestacije ranjivosti na poslu\u017eiteljima, alat za izvo\u0111enje napada). Za HTTP\/3 napadi jo\u0161 nisu zabilje\u017eeni, a mogu\u0107nost njihovog izvo\u0111enja nije potpuno analizirana, no predstavnici Googlea preporu\u010duju programerima <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/hr\/server\/\"   title=\"poslu\u017eitelja\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"1590\">poslu\u017eitelja<\/a>  da dodaju u implementacije HTTP\/3 sigurnosne mjere sli\u010dne onima koje su provedene za blokiranje napada na HTTP\/2.    <\/p>\n<p>Podlo\u017enost ranjivosti i dostupnost ispravaka za HTTP poslu\u017eitelje i proksije:  <\/p>\n<ul>\n<li class=\"l\"> nginx (najava, obja\u0161njenje da ranjivost u potpunosti ne utje\u010de na nginx u zadanoj konfiguraciji, jer \u0107e se napad suo\u010diti s granicom broja zahtjeva po vezi (t.j. nakon svakih 1000 zahtjeva veza \u0107e se resetirati). U ispravku je dodana dodatna za\u0161tita ograni\u010davanjem intenziteta zahtjeva putem direktive \u201elimit_req\u201c).\n<li class=\"l\"> U HAProxy u\u010dinkovita za\u0161tita od prekora\u010denja limita broja HTTP\/2 tokova dodana je jo\u0161 2018. godine i djeluje od verzije 1.9-dev.\n<li class=\"l\"> Apache httpd (stvara se odre\u0111eno optere\u0107enje na httpd-u, ali se to ne prenosi na backend sustave i ograni\u010deno je na postoje\u0107e limite za klijentske veze iz 2016. godine).\n<li class=\"l\"> mod_h2 za Apache httpd.\n<li class=\"l\"> caddy\n<li class=\"l\"> envoy\n<li class=\"l\"> golang (problem je rije\u0161en u izdanjima Go 1.21.3 i 1.20.10).\n<li class=\"l\"> h2o (zakrpa).\n<li class=\"l\"> grpc-go\n<li class=\"l\"> hyper (ranjivost se ne manifestira).\n<li class=\"l\"> jetty (ispravljeno u verzijama 12.0.2, 11.0.17, 10.0.17 i 9.4.53.v20231009).\n<li class=\"l\"> netty\n<li class=\"l\"> nghttp2 (ispravljeno u verziji 1.57.0).\n<li class=\"l\"> Facebook proxygen\n<li class=\"l\"> .NET i ASP.NET Core (ranjivosti je podlo\u017ean http-server ASP.NET Core Kestrel).\n<li class=\"l\"> Node.js\n<li class=\"l\"> proxygen\n<li class=\"l\"> swift-nio-http2 (ispravljeno u verziji 1.28.0).\n<li class=\"l\"> Apache Tomcat (ispravljeno u verzijama 11.0.0-M12, 10.1.14, 9.0.81, 8.5.94).\n<li class=\"l\"> Apache Traffic Server (ispravljeno u grani 9.2.x).    <\/ul>\n<p>Izvor: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=59901\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u043a\u0440\u0443\u043f\u043d\u0435\u0439\u0448\u0443\u044e DDoS-\u0430\u0442\u0430\u043a\u0443 \u043d\u0430 \u0441\u0432\u043e\u044e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443, \u0438\u043d\u0442\u0435\u043d\u0441\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0441\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 398 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0432 \u0441\u0435\u043a\u0443\u043d\u0434\u0443. \u041d\u043e\u0432\u0430\u044f \u0430\u0442\u0430\u043a\u0430 \u0432 7 \u0440\u0430\u0437 \u043f\u0440\u0435\u0432\u043e\u0441\u0445\u043e\u0434\u0438\u0442 \u043f\u043e \u0438\u043d\u0442\u0435\u043d\u0441\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0448\u043b\u0443\u044e \u0440\u0435\u043a\u043e\u0440\u0434\u043d\u0443\u044e DDoS-\u0430\u0442\u0430\u043a\u0443, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u0442\u043e\u043a \u0438\u0437 47 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0432 \u0441\u0435\u043a\u0443\u043d\u0434\u0443. \u0414\u043b\u044f \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u044f \u0432\u0435\u0441\u044c \u0442\u0440\u0430\u0444\u0438\u043a \u0432\u043e \u0432\u0441\u0451\u043c Web \u043e\u0446\u0435\u043d\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 1-3 \u043c\u0438\u043b\u043b\u0438\u0430\u0440\u0434\u043e\u0432 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0432 \u0441\u0435\u043a\u0443\u043d\u0434\u0443. \u041f\u043e\u043c\u0438\u043c\u043e [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":110729,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-110728","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u043a\u0440\u0443\u043f\u043d\u0435\u0439\u0448\u0443\u044e DDoS-\u0430\u0442\u0430\u043a\u0443 \u043d\u0430 \u0441\u0432\u043e\u044e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443, \u0438\u043d\u0442\u0435\u043d\u0441\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0441\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 398 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0432 \u0441\u0435\u043a\u0443\u043d\u0434\u0443.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/hr\/blog\/news\/uyazvimost-v-protokole-http-2-zadejstvovannaya-v-krupnejshej-ddos-atake\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"hr_HR\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435 HTTP\/2, \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u0432 \u043a\u0440\u0443\u043f\u043d\u0435\u0439\u0448\u0435\u0439 DDoS-\u0430\u0442\u0430\u043a\u0435 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u043a\u0440\u0443\u043f\u043d\u0435\u0439\u0448\u0443\u044e DDoS-\u0430\u0442\u0430\u043a\u0443 \u043d\u0430 \u0441\u0432\u043e\u044e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443, \u0438\u043d\u0442\u0435\u043d\u0441\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0441\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 398 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0432 \u0441\u0435\u043a\u0443\u043d\u0434\u0443.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/hr\/blog\/news\/uyazvimost-v-protokole-http-2-zadejstvovannaya-v-krupnejshej-ddos-atake\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2023-10-11T01:10:14+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2023-10-11T01:10:14+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Ranljivost u protokolu HTTP\/2 koja je kori\u0161tena u najve\u0107em DDoS napadu | ProHoster","description":"Tvrtka Google zabilje\u017eila je najve\u0107i DDoS napad na svoju infrastrukturu, \u010dija je intenzivnost iznosila 398 milijuna zahtjeva u sekundi.","canonical_url":"https:\/\/prohoster.info\/hr\/blog\/news\/uyazvimost-v-protokole-http-2-zadejstvovannaya-v-krupnejshej-ddos-atake","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hr_HR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435 HTTP\/2, \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u0432 \u043a\u0440\u0443\u043f\u043d\u0435\u0439\u0448\u0435\u0439 DDoS-\u0430\u0442\u0430\u043a\u0435 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u043a\u0440\u0443\u043f\u043d\u0435\u0439\u0448\u0443\u044e DDoS-\u0430\u0442\u0430\u043a\u0443 \u043d\u0430 \u0441\u0432\u043e\u044e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443, \u0438\u043d\u0442\u0435\u043d\u0441\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0441\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 398 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0432 \u0441\u0435\u043a\u0443\u043d\u0434\u0443.","og:url":"https:\/\/prohoster.info\/hr\/blog\/news\/uyazvimost-v-protokole-http-2-zadejstvovannaya-v-krupnejshej-ddos-atake","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-10-11T01:10:14+00:00","article:modified_time":"2023-10-11T01:10:14+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"110728","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-02-09 16:50:56","updated":"2026-02-22 15:30:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/110728","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/comments?post=110728"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/110728\/revisions"}],"predecessor-version":[{"id":162251,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/110728\/revisions\/162251"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/media\/110729"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/media?parent=110728"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/categories?post=110728"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/tags?post=110728"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}