3 ms·

All it takes is a compromised browser extension. Happens all the time: https://threatpost.com/seven-more-chrome-extensions-compromised/127458/ https://threatpo

• peterwwillis 9y ago
  And a compromised node.js dependency could own a non-browser-controlled install. But you don't have to use node.js apps, and you don't need to use browser extensions.
  • lima 9y ago
    Sure, but now you'll need to make sure noone in your company who has full access to Tower is using browser extensions. It's absolutely possible to use Ansible Tower securely, it just takes some effort.