r.http and admin ui proxy notifications

rethinkdb / docs

RethinkDB documentation

http://rethinkdb.com/docs

Apache License 2.0

117 stars 167 forks source link

Closed gabor-boros closed 4 years ago

gabor-boros commented 4 years ago

[x] I have read and agreed to the RethinkDB Contributor License Agreement http://rethinkdb.com/community/cla/

Add notification that the Admin UI can be exploited when it is not behind a proxy and letting r.http handle user provided content.