From 160162ee5d728de861ab0c7e124388332c2d12d8 Mon Sep 17 00:00:00 2001 From: Nick Sweeting Date: Sat, 12 Dec 2020 08:53:39 -0500 Subject: [PATCH] Updated Publishing Your Archive (markdown) --- Publishing-Your-Archive.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Publishing-Your-Archive.md b/Publishing-Your-Archive.md index cec52cf..8e34628 100644 --- a/Publishing-Your-Archive.md +++ b/Publishing-Your-Archive.md @@ -54,8 +54,8 @@ Urls look like: `https://archive.example.com/archive/1493350273/en.wikipedia.org ## Security Concerns -Re-hosting other people's content has security implications for any other sites sharing your hosting domain. Make sure you understand the dangers of hosting unknown archived CSS & JS files [on your shared domain](https://developer.mozilla.org/en-US/docs/Web/Security/Same-origin_policy). -Due to the security risk of serving some malicious JS you archived by accident, it's best to put this on a domain or subdomain of its own to keep cookies separate and slightly mitigate [CSRF attacks](https://en.wikipedia.org/wiki/Cross-site_request_forgery) and other nastiness. +Re-hosting other people's content has security implications for any other sites sharing your hosting domain. Make sure you understand the dangers of hosting unknown archived CSS & JS files [on a shared domain](https://developer.mozilla.org/en-US/docs/Web/Security/Same-origin_policy). +Due to the security risk of serving some malicious JS you archived by accident, it's best to put this on a domain or subdomain of its own to keep cookies separate and help limit the effectiveness of [CSRF attacks](https://en.wikipedia.org/wiki/Cross-site_request_forgery) and other nastiness. ## Copyright Concerns