警告:将检查器绑定到公共 IP:端口组合不安全
¥Warning: binding inspector to a public IP:port combination is insecure
将检查器绑定到具有开放端口的公共 IP(包括 0.0.0.0
)是不安全的,因为它允许外部主机连接到检查器并执行 远程代码执行 攻击。
¥Binding the inspector to a public IP (including 0.0.0.0
) with an open port is
insecure, as it allows external hosts to connect to the inspector and perform
a remote code execution attack.
如果指定主机,请确保:
¥If specifying a host, make sure that either:
-
无法从公共网络访问该主机。
¥The host is not accessible from public networks.
-
防火墙不允许端口上不需要的连接。
¥A firewall disallows unwanted connections on the port.
更具体地说,如果端口(默认为 9229
)未受防火墙保护,则 --inspect=0.0.0.0
是不安全的。
¥More specifically, --inspect=0.0.0.0
is insecure if the port (9229
by
default) is not firewall-protected.
有关详细信息,请参阅 调试安全隐患 部分。
¥See the debugging security implications section for more information.