1
submitted 5 months ago by tyteen4a03@lemmy.zip to c/css@programming.dev
[-] tyteen4a03@lemmy.zip 3 points 7 months ago

So what part of the proposed solutions "wouldn't work"?

[-] tyteen4a03@lemmy.zip 2 points 7 months ago

Having something is better than nothing! In our case, having connect-src enabled would have avoided the incident.

[-] tyteen4a03@lemmy.zip 2 points 7 months ago* (last edited 7 months ago)

Not sure what you're referring to by "custom endpoints" - if you are a normal Datadog RUM user you can only ever send data to one of the several "sites". There's nothing customizable.

39
Datadog has a security footgun (sheriffcranky.substack.com)

tyteen4a03

joined 1 year ago