1. Docker’s Network Model 1.1 bridge Mode bridge mode is used by default, and you can also specify it with --net=bridge. In bridge mode, containers connect to the same virtual bridge, docker0. docker0 usually occupies the 172.17.0.1/16 subnet. Containers on the same bridge can communicate directly over IP. 1.2 host Mode Use --net=host to specify host mode.

1. Returning the File Directly If the static file is at media/test.zip in the project root, you first have to read the file into memory and then transfer it. The code looks like this: settings.py configuration 1 2 PROJECT_ROOT = os.path.dirname(os.path.abspath(__file__)) MEDIA_ROOT = os.path.join(PROJECT_ROOT, 'media/') yourapp/views.py 1 2 3 4 5 6 7 8 9 10 11 12 from django.

1. Same-Origin Policy The same-origin policy is the cornerstone of browser security. The definition of same-origin covers three aspects: Same protocol Same domain Same port Scope of the restrictions: Cookie, LocalStorage, and IndexDB cannot be read The DOM cannot be obtained AJAX requests cannot be sent Simply put, two URLs whose protocol, domain, and port differ in any way are not allowed to communicate with each other, and the scope covers reading each other’s cookies and DOM and sending AJAX requests.

1. What Is DDoS Take the Spring Festival ticket rush: the moment high-speed rail tickets go on sale, people all over the country send connection requests to the 12306 servers. The 12306 servers then either stop responding or respond slowly to web requests. That constitutes a DDoS attack — through a large number of concurrent requests, the target service is forced to become degraded, or even to shut down.

1. Introduction to BWAPP buggy web Application, abbreviated BWAPP, is an open-source web application that packs in all kinds of common and recent vulnerabilities, with the goal of helping security enthusiasts, developers, and students find and prevent web vulnerabilities. It contains more than 100 vulnerabilities, covering every major known web vulnerability, including the OWASP Top 10 security risks, and most importantly it already includes the OpenSSL and ShellShock vulnerabilities.