Skip to content

Commit accb8ae

Browse files
Trottaddaleax
authored andcommitted
doc: revise inspect security info in cli.md
Revise inspect security information in cli.md. * Reword sentence for brevity. * Use bulleted list for clarity of options. * Eliminate personal pronoun (_you_) per style guide. PR-URL: #25779 Reviewed-By: Vse Mozhet Byt <vsemozhetbyt@gmail.com> Reviewed-By: Colin Ihrig <cjihrig@gmail.com> Reviewed-By: Richard Lau <riclau@uk.ibm.com> Reviewed-By: James M Snell <jasnell@gmail.com> Reviewed-By: Anna Henningsen <anna@addaleax.net>
1 parent fd98d62 commit accb8ae

File tree

1 file changed

+4
-3
lines changed

1 file changed

+4
-3
lines changed

doc/api/cli.md

+4-3
Original file line numberDiff line numberDiff line change
@@ -246,9 +246,10 @@ Binding the inspector to a public IP (including `0.0.0.0`) with an open port is
246246
insecure, as it allows external hosts to connect to the inspector and perform
247247
a [remote code execution][] attack.
248248

249-
If you specify a host, make sure that at least one of the following is true:
250-
either the host is not public, or the port is properly firewalled to disallow
251-
unwanted connections.
249+
If specifying a host, make sure that either:
250+
251+
* The host is not accessible from public networks.
252+
* A firewall disallows unwanted connections on the port.
252253

253254
**More specifically, `--inspect=0.0.0.0` is insecure if the port (`9229` by
254255
default) is not firewall-protected.**

0 commit comments

Comments
 (0)