To prevent injection running of unauthorized code from the frontend, you'll need to do the following:
- Do not allow unfiltered text to be submitted through forums or requests.
- Verify that a firewall on the node is running, and that only necessary ports are active. For example, you may allow 8080 on the development firewall, but you may be only allowing 443 on the production firewall for HTTPS.
- To prevent cross-site scripting attacks, do not enable course, which is turned off by default in Jetty and Tomcat through config files, or turn it back off if you enable it during development and testing.
- If you need to run a different machine that requires cores, make certain to limit the domain names from which score is permitted; requests ...
