Currently, we already use distinct top-level user domains for user content and application, to mitigate attacks.
But best practice is to use a specific domain for that restricted to this use. Usage tends to choose an explicitly name like githubusercontent.com.
Plan is to migrate Phabricator instances raw/static content to this domain.
That means we need to edit the following container properties:
- Zed Code
- River Sector
As hosted projects don't have such domain name either, an universal domain name like nasqueroncontent.org would be suitable for this use.
No application code should be served from it.