webwhiz icon indicating copy to clipboard operation
webwhiz copied to clipboard

Support Redis authentication

Open runephilosof-abtion opened this issue 6 months ago • 0 comments

It is good practice to protect Redis with authentication. For defense in depth to protect against exploits of SSRF for instance.

Some places does not support the environment variable REDIS_URL, which otherwise could be used to supply a Redis connection string with a password.

https://github.com/webwhiz-ai/webwhiz/blob/d1cc6675846e0d0527228dbbd08b61943bd59d6f/src/crawler.main.ts#L92 https://github.com/webwhiz-ai/webwhiz/blob/d1cc6675846e0d0527228dbbd08b61943bd59d6f/workers/worker.py#L31

runephilosof-abtion avatar Aug 13 '24 13:08 runephilosof-abtion