Currently, we already use distinct top-level user domains for user content and application, to mitigate attacks.
But best practice is to use a specific domain for that restricted to this use. Usage tends to choose an explicitly name like githubusercontent.com.
Plan is to migrate Phabricator instances raw/static content to this domain.
That means we need to edit the following container properties:
- DevCentral
- Zed Code
- River Sector
- Wolfplex
As hosted projects don't have such domain name either, an universal domain name like nasqueroncontent.org would be suitable for this use.
No application code should be served from it.