search

Maria-Liakata-NLP-Group / long

"LoNG" is a web user interface for performing longitudinal NLP analysis.
2 stars 0 forks source link

Review default security for Plotly/Dash on local network #46

Open andrewphilipsmith opened 1 year ago

andrewphilipsmith commented 1 year ago

See https://github.com/Maria-Liakata-NLP-Group/long/issues/37 for equivalent issue using Jupyter.

andrewphilipsmith commented 1 year ago

Unlike the Jupyter Notebook interface, the Plotly + Dash interface does not allow the arbitrary execution of user's or third-party code.

Therefore the remaining security concern is controlling access to private data that is already held by a particular instance. This can be achieved by normal authentication mechanism provided by nginx.

See also #31