Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Document using show instead of serve #42

Open
spanezz opened this issue Dec 27, 2019 · 0 comments
Open

Document using show instead of serve #42

spanezz opened this issue Dec 27, 2019 · 0 comments
Labels
security Security related issue
Milestone
1.5 "repo"

Comments

@spanezz
Copy link
Owner

spanezz commented Dec 27, 2019

ssite serve will read settings.py or .staticsite.py files and execute them. This means that if it is used to preview random git repositories, a repository with such a file can get it executed. This can be both a security issue and an annoyance, as in for example previewing a django project.

Document that ssite show does not have this issue and should be used by default. ssite serve is still useful to serve a site that the user has control of.
@spanezz spanezz added the security Security related issue label Dec 27, 2019
@spanezz spanezz added this to the 1.5 "repo" milestone Jan 6, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
security Security related issue
Projects
None yet
Milestone
1.5 "repo"
Development

No branches or pull requests
1 participant
@spanezz