vincent-porret
CDCloudflare Developers
•Created by Max Prilutskiy on 10/10/2024 in #workers-help
How do I debug the worker bundle size?
3 replies
CDCloudflare Developers
•Created by Max Prilutskiy on 10/10/2024 in #workers-help
How do I debug the worker bundle size?
hey ! with the --dry-run flag you can compile and check the build before it is deployed
3 replies
CDCloudflare Developers
•Created by vincent-porret on 10/8/2024 in #workers-help
Restrict outgoing worker traffic with whitelist
* it is very easy to patch any method and add a proxy function to execute some code before and/or after calls made by the worker, while still remaining totally invisible. An simple "import" in one dependency is enough to open the door. With the help of libs like 'ride' (github.com/dtinth/ride) it only requires a few lines of code to implement a listener that can observe all http calls for example, looking for credentials before they even leave the worker. With a firewall the malicious code will not be able to upload the collected data.
7 replies
CDCloudflare Developers
•Created by vincent-porret on 10/8/2024 in #workers-help
Restrict outgoing worker traffic with whitelist
A "firewall" (a basic whitelist of trusted domains) could be a very simple solution to fix this, don't you think ?
7 replies
CDCloudflare Developers
•Created by vincent-porret on 10/8/2024 in #workers-help
Restrict outgoing worker traffic with whitelist
Many developers (including me) do not take enough time to analyze all the libraries they install (and their dependencies), and even if they do so, they would have to review them on every update because something malicious may have been inserted in the code.
I may sound like a little bit paranoid, but there are more and more stories of malicious code designed like this to steal data as they can do a lot more things... and faster.
7 replies
CDCloudflare Developers
•Created by vincent-porret on 10/8/2024 in #workers-help
Restrict outgoing worker traffic with whitelist
yes, I was aware of the workers for platform solution but, correct me if I'm wrong, even if the outgoing worker can precisely take the role of a firewall to monitor all requests from child workers and block them if necessary, there is nothing that can prevent a request to be made if intiated from the platform worker thread ?
7 replies
CDCloudflare Developers
•Created by vincent-porret on 10/8/2024 in #workers-help
Restrict outgoing worker traffic with whitelist
Hey, thanks for your answer 🙂
7 replies