4 ms·
I am not full deep in SecOps these days and would gladly hear opinion of some expert: Can disabling these mitigations bring any risks assuming the server is se
by imhoguy 5y ago
I am not full deep in SecOps these days and would gladly hear opinion of some expert:
Can disabling these mitigations bring any risks assuming the server is sending static content to the Internet over port 80/443 and it is practically stateless with read-only file system?
- syoc 5y agoI am not an expert but you shall have my take either way. The most important question here is "Am I executing arbitrary untrusted code?". HTTP servers will parse the incoming requests so they are executed to some extent. But I would not worry about it unless there is some backend application doing more involved processing with the data. repl.it should not disable mitigations.