3 ms·
While you are right, remember there are usually additional layers of security (and if not, there should be). On the network level, you would only allow ports 80
by mmcnl 3y ago
While you are right, remember there are usually additional layers of security (and if not, there should be). On the network level, you would only allow ports 80/443 to reach the machine. And if you use a containerized deployment, you would only expose 80/443 as well.
- btgeekboy 3y agoIf your application can be used to make outbound requests to the internet (and so many apps can be), you can easily make a GET against localhost. There are ways to lock that down, but they aren’t automatic.