You are viewing a plain text version of this content. The canonical link for it is here.

Posted to notifications@couchdb.apache.org by "estoT1 (via GitHub)" <gi...@apache.org> on 2023/11/01 08:29:00 UTC

Re: [I] Need to limit access to Fauxton UI to localhost, but maintain remote API access. [couchdb]

estoT1 commented on issue #4827:
URL: https://github.com/apache/couchdb/issues/4827#issuecomment-1788590244

   Thank you for your prompt reply, all feedback is appreciated.
   From your reply I infer the Fauxton UI cannot be limited to local host bind address from the APIs?
   
   Short answer: Reducing the attack surface. Everything has its issue and must be patched.
   Long answer: To minimize the impact of UI vulnerabilities and assign appropriate maintenance plan/risk response plan for the CouchDB asset group.
   
   Thanking you in advance!
   🙇 


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@couchdb.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org