5 ms·
Keep them away from both the image and the container! Getting env var values dumped for a process is trivial outside of the process and even easier within the c
by sgnnseven 6y ago
Keep them away from both the image and the container! Getting env var values dumped for a process is trivial outside of the process and even easier within the container process space.
- PowerBar 6y agoIt astounds me how many developers don't realize just how many places environment variables end up, even on a properly functioning server. common info pages (ex: phpinfo), core dumps, debug errors and logs are notorious for containing them. And those aren't even counting the ways a malicious actor can persuade a program to provide them.