Dear Developers, Beware of DNS Rebinding: DNS Rebinding and CSRF with Etcd

Posted by zelivans on Wednesday February 28, 2018 @01:28PM
from the twistlock.com dept.

( 3 comments | 5 points | on HN )

Re:Dear Developers, Beware of DNS Rebinding: DNS Rebinding a... by Piskvorrr on Wednesday February 28, 2018 @01:39PM (#16485447)

So...CSRF tokens for everything?

[ Parent | on HN ]

Re:Dear Developers, Beware of DNS Rebinding: DNS Rebinding a... by Da5h_Solo on Thursday March 01, 2018 @04:42AM (#16490743)

a white-list solution would be a better approach for such thing

[ Parent | on HN ]

Re:Dear Developers, Beware of DNS Rebinding: DNS Rebinding a... by Piskvorrr on Thursday March 01, 2018 @04:44AM (#16490760)

Whitelist of what?

[ Parent | on HN ]