security: replace public httpbin target with localhost in simple.yaml - #25
Open
cycloarcane wants to merge 1 commit into
Open
security: replace public httpbin target with localhost in simple.yaml#25cycloarcane wants to merge 1 commit into
cycloarcane wants to merge 1 commit into
Conversation
Addresses Stanford-Trinity#24 by changing the default test target to localhost. This prevents accidental automated attacks (DoS, Fuzzing) against public infrastructure when new users run the default smoke test.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Addresses #24.
Problem:
The default configuration in configs/tests/simple.yaml points to httpbin.org. When users run this as their first test, the autonomous Supervisor frequently plans high-volume tasks like Denial of Service (DoS) probing and directory brute-forcing. Running these against a public resource without permission is a safety/legal risk.
Solution:
This PR changes the default target to http://localhost:8000. This ensures that new users operate within a safe, contained environment for their initial testing.
Changes: