12
[-] tyteen4a03@lemmy.zip 3 points 6 months ago

So what part of the proposed solutions "wouldn't work"?

[-] tyteen4a03@lemmy.zip 2 points 6 months ago

Having something is better than nothing! In our case, having connect-src enabled would have avoided the incident.

[-] tyteen4a03@lemmy.zip 2 points 6 months ago* (last edited 6 months ago)

Not sure what you're referring to by "custom endpoints" - if you are a normal Datadog RUM user you can only ever send data to one of the several "sites". There's nothing customizable.

39
Datadog has a security footgun (sheriffcranky.substack.com)
15
submitted 8 months ago by tyteen4a03@lemmy.zip to c/berlin@feddit.de

tyteen4a03

joined 11 months ago