So if you hit a website & can trick the app to running a command as sudo! oh no! Wait everyone is running their docker containers with root as the app user, so if they could pop a console, they didn't need sudo.
If there isn't a USER command in your Dockerfile this doesn't matter. Why bother to lock the back doors if your front door is open.
♡ 3 ↻ 0