4 ms·
Warning, that's NOT "firewalled" from your main application/database. If it's just part of the path on the same domain, then almost any Wordpress security vuln
by hobobaggins 3y ago
Warning, that's NOT "firewalled" from your main application/database.
If it's just part of the path on the same domain, then almost any Wordpress security vulnerability can leak over into your main application (i.e., cookies, credential stuffing, xss, etc)
- acer4666 3y agoClient side web attacks don't affect how the two servers are firewalled from each other. I agree it isn't properly secure, but "firewall" refers to a specific type of security.
- hobobaggins 3y agoActually, network firewalls have nothing to do with website paths at all, but that is how the parent was using the term, so clearly they were thinking in terms of a more ambiguous term like sandboxing or isolation. Not looking to be pedantic, but by conflating the two terms, the parent was confusing both themselves and others -- and giving dangerously insecure advice.