You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Allowing random users to execute code on your server should be met with pretty heavy skepticism from a security perspective in most cases. Not only is that being done here, but the user has unlimited access to all default python libraries (including those that allow interaction with file system and os), and in the case of ibnkhaldun, potentially with root access. This is incredibly dangerous if we wish to run a publicly accessible server.
This will likely spawn sub issues as we identify specific security issues.
Potential fixes:
Do not allow users to call internal functions
Restrict available libraries to only those necessary
Run code clientside (is there a js library for this? Is this feasible)
The text was updated successfully, but these errors were encountered:
Allowing random users to execute code on your server should be met with pretty heavy skepticism from a security perspective in most cases. Not only is that being done here, but the user has unlimited access to all default python libraries (including those that allow interaction with file system and os), and in the case of ibnkhaldun, potentially with root access. This is incredibly dangerous if we wish to run a publicly accessible server.
This will likely spawn sub issues as we identify specific security issues.
Potential fixes:
The text was updated successfully, but these errors were encountered: