pwning-juice-shop
pwning-juice-shop copied to clipboard
Don't forward all IPs to the docker container
The docker instructions say to use -p 3000:3000
, but this forwards port 3000 on all host interfaces. That means that, in the absence of a host firewall, anyone on the network can connect to your juice shop, which is possibly not what you want for self-study.
Instead, docker provides a facility to only forward ports on selected IP addresses; -p 127.0.0.1:3000:3000
will only forward port 3000 on localhost (v4); if that is sufficient for the exercises perhaps it would be a more conservative configuration to suggest?
docs/modules/ROOT/pages/part1/running.adoc