Prevent ALL access to $SYS from outside localhost.
The structure of $SYS is pretty well known or can be guessed and can contain non-public information and therefore should be protected.
This commit is contained in:
parent
6cc7f63c2b
commit
94dfa95419
|
@ -20,7 +20,7 @@
|
|||
|
||||
{allow, {ipaddr, "127.0.0.1"}, pubsub, ["$SYS/#", "#"]}.
|
||||
|
||||
{deny, all, subscribe, [{eq, "$SYS/#"}, {eq, "#"}]}.
|
||||
{deny, all, subscribe, ["$SYS/#", {eq, "#"}]}.
|
||||
|
||||
{allow, all}.
|
||||
|
||||
|
|
Loading…
Reference in New Issue