A Network Allow-List Won't Stop Exfiltration — André Graf
www.dergraf.org
If you let sandboxed code reach one domain, it can leak your secrets through that domain. Why network allow-lists have a structural blind spot, and how an L7 proxy with data-loss prevention closes it.
  • mvirts@lemmy.worldEnglish
    1·
    1 month ago

    For all this trouble I would rather give bad credentials inside the container and replace them with real credentials in the proxy.