Skip to content

Document using show instead of serve #42

@spanezz

Description

@spanezz

ssite serve will read settings.py or .staticsite.py files and execute them. This means that if it is used to preview random git repositories, a repository with such a file can get it executed. This can be both a security issue and an annoyance, as in for example previewing a django project.

Document that ssite show does not have this issue and should be used by default. ssite serve is still useful to serve a site that the user has control of.

Metadata

Metadata

Assignees

No one assigned

    Labels

    securitySecurity related issue

    Projects

    No projects

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions