scala-js / scala-js-website

Source for https://www.scala-js.org/
259 stars 146 forks source link

Do not expose generated dev docker site to the internet #618

Closed gzm0 closed 11 months ago

gzm0 commented 11 months ago

By default, published docker ports "bind" to all inbound addresses. We restrict to localhost to avoid exposing the site to the internet.

Note that malicious same L2 participants can still reach the container due to: https://github.com/moby/moby/issues/45610