WRI-Cities / static-GTFS-manager

GUI interface for creating, editing, exporting of static GTFS data for a public transit authority
GNU General Public License v3.0
148 stars 46 forks source link

Harden web server to prevent browser access to certain files and folders #143

Closed answerquest closed 5 years ago

answerquest commented 5 years ago

See: https://stackoverflow.com/questions/55759974/restrict-access-to-certain-files-folders-in-python-tornado-web-server/

Need to ensure that putting in "http://localhost:5000/GTFSManager.py" or so in the browser doesn't yield anything to outsiders in the use case of this being deployed on the open web. Also, prevent accessing anything in the "pw" folder.

Used custom defined Tested it and works.. will push to repo in next update.