mirror of
https://github.com/goldbergyoni/nodebestpractices.git
synced 2025-11-01 18:46:54 +08:00
docs: Change 'his' to gender neutral term 'their'
This commit is contained in:
@ -919,7 +919,7 @@ Also known as correlation id / transit id / tracing id / request id / request co
|
||||
|
||||
**TL;DR:** There is a common scenario where Node.js runs as a root user with unlimited permissions. For example, this is the default behaviour in Docker containers. It's recommended to create a non-root user and either bake it into the Docker image (examples given below) or run the process on this user's behalf by invoking the container with the flag "-u username"
|
||||
|
||||
**Otherwise:** An attacker who manages to run a script on the server gets unlimited power over the local machine (e.g. change iptable and re-route traffic to his server)
|
||||
**Otherwise:** An attacker who manages to run a script on the server gets unlimited power over the local machine (e.g. change iptable and re-route traffic to their server)
|
||||
|
||||
🔗 [**Read More: Run Node.js as non-root user**](./sections/security/non-root-user.md)
|
||||
|
||||
|
||||
Reference in New Issue
Block a user