search

jlesage / docker-firefox

Docker container for Firefox
MIT License
1.61k stars 288 forks source link

Security concerns #114

Closed hgpuke closed 2 years ago

hgpuke commented 2 years ago

Hi! I am running your container on a Linux server at home. My purpose of using it is to be able to manage the server and other resources in my home network, while I am not at home. I have set up a subdomain for the Firefox web-page so that I can access it from anywhere (via a reverse proxy). I have noticed that when accessing Firefox from work, and displaying the Cockpit management interface for my server, if a collegue of mine also goes to the firefox page, he is also automatically logged in to the Cockpit management interface. Basically any page that Firefox is displaying for me can also be seen by my collegue. This is a high security risk for me. Is there any way to prevent this?

jlesage commented 2 years ago

If you did not setup any protection on you reverse proxy, anyone knowing the URL will effectively be able to access the container. You should configure the reverse proxy to require a username/password to connect.

jlesage commented 2 years ago

Closing this issue. Please reopen if needed.