search

manatlan / guy

Graphics User Ynterface : a simple module for making GUI applications (with html/js) for py3 ... to target windows, linux, mac & android
Apache License 2.0
202 stars 23 forks source link

Security #1

Closed MarBGamer closed 4 years ago

MarBGamer commented 4 years ago

I have a question. Is guy secure enough to be used as an online website? Like I don't want people going through the python code or looking at other files on the server. But I'd love to be able to use guy because it is exactly what I need for my little project!

manatlan commented 4 years ago

Guy is as solid/secure as tornado... it just add a thin layer over tornado

On the host server. Consider to put your guy behind a reverse proxy (like nginx), to use ssl for your http.

BTW, currently, you can shutdown the server, using the js on clientside (press F12, type "self.exit()") .. It's amazing, but I should provide a way to block that feature, for server mode ;-)

try: https://starter-guy-vuejs.glitch.me/ ... but glitch will restart the process ;-)

MarBGamer commented 4 years ago

Thank you very much! I was already planning on putting it behind nginx and using SSL so that shouldn't be a problem. Thanks for you amazing work!