3 ms·
I didn't see "Firewall that thing off from the Internet" mentioned as an option. Not all web apps are public-facing, after all.
by wtracy 13y ago
I didn't see "Firewall that thing off from the Internet" mentioned as an option. Not all web apps are public-facing, after all.
- patio11 13y agoThat is a partial option, but there are ways in which it is inadequate. For example, with the January Rails vulnerabilities, dropping an IMG tag with a well-constructed URL on a site on the public internet was likely enough to suborn a developer's browser into connecting to and rooting a Rails box that was firewalled from external traffic. You still want to patch things, to prevent that and similar issues.