Re: [whatwg/fetch] Consider shifting the "bad port list" to an allowlist. (#1189) from Paul Norman on 2024-01-25 (public-webapps-github@w3.org from January 2024)

From: Paul Norman <notifications@github.com>
Date: Wed, 24 Jan 2024 23:47:16 -0800
To: whatwg/fetch <fetch@noreply.github.com>
Cc: Subscribed <subscribed@noreply.github.com>
Message-ID: <whatwg/fetch/issues/1189/1909545382@github.com>

I came across this via port 10080 and amanda for my prometheus exporter. Prometheus exporters speak HTTP/HTTPS, and when developing them it's common to use a web browser to see what's being returned.

Ports 9100-10013 are used by a prometheus exporter. Any one server will be only using a small fraction of those since each port is a different piece of software being monitored. I assume each one has had users setting it up who visited the exporter in a web browser to test, and developers will of done the same.

I also want to note that I know of several pieces of software that put up a HTTP server for users to use the software and don't have the port appear on the list in the first post.

-- 
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/1189#issuecomment-1909545382
You are receiving this because you are subscribed to this thread.

Message ID: <whatwg/fetch/issues/1189/1909545382@github.com>

Received on Thursday, 25 January 2024 07:47:22 UTC