SecurityInnovation/TMContentReview — Issue #177: Partition Application Between Public and Private Domains
Author: SergeTruth
Created: 2011-11-07 23:21:07+00:00
State: open

This section is a bit vague. I am not sure how having a /data directory servered by the server will protect that data if an attacker can use the application server code to retrieve files from that directory (through file path vulnerability).