-
Notifications
You must be signed in to change notification settings - Fork 6.5k
Open
Labels
enhancementNew feature or requestNew feature or requestsandboxIssues related to permissions or sandboxingIssues related to permissions or sandboxing
Description
What feature would you like to see?
Some build tools require binding to local address for compilation and code execution to work, such as Elixir's Mix. One potential option here is to allow such operations in the sandbox.
However, one could also claim that we should have a security profile that allows localhost connections. That's because many development tools need to talk to the database, Redis, etc. Of course, allowing outgoing localhost connections expands the threat model considerably (I could then use my database to invoke potentially harmful commands), but we can argue that's less harmful than opening all network operations.
Additional information
No response
stellar-scottreed, guto-at-braze, experimarketing, yorkxin, jbothe and 1 more
Metadata
Metadata
Assignees
Labels
enhancementNew feature or requestNew feature or requestsandboxIssues related to permissions or sandboxingIssues related to permissions or sandboxing