I have a content site https://www.mysite.com
I'm asking a client to configure a reverse proxy server connection in their server so everything inside the subdirectory 'external-content' gets pulled from my site.
Would get loaded from:
They don't want to do this for fear of exposing their LAN to the Internet. I understand that a reverse proxy server is nothing but a sophisticated redirect and that their main network wouldn't be exposed to, say, directory traversal attacks, mysql injection, etc. Is this correct?
Suppose my site is super vulnerable, is it possible to attack the main server through a reverse proxy connection that doesn't interact in any other way than the one mentioned above?
Is restricting traffic from the reverse proxy IP to only that subdirectory a viable solution?
Thanks in advance!