3 ms·
Ahhh, unauthenticated services on the loopback. For when you want to be penetrated from behind via javascript drive-by. Yes, including your server, because you
by jxbjdjskjsj 4y ago
Ahhh, unauthenticated services on the loopback. For when you want to be penetrated from behind via javascript drive-by.
Yes, including your server, because you're probably forwarding that port to your workstation via ssh.
- mholt 4y agoCan you demonstrate an exploit in Caddy itself (i.e. isn't actually exploiting something else, or configuring yourself into a hole first -- we can't do much about external factors)? If it's valid we'll see about a patch.