The DHC web UI writes files to a directory. Because of this, users can import these files to use in other scripts. To do this, they need to add /data/notebooks to the python path. Adding this path by default for all users can be risky because the mechanism used to create and maintain these files is totally insecure -- any browser can edit them.
Document everything, including the vulnerability. Have instructions on how to add it and explain the reason why.
The DHC web UI writes files to a directory. Because of this, users can import these files to use in other scripts. To do this, they need to add /data/notebooks to the python path. Adding this path by default for all users can be risky because the mechanism used to create and maintain these files is totally insecure -- any browser can edit them.
Document everything, including the vulnerability. Have instructions on how to add it and explain the reason why.