search

ricklamers / gridstudio

Grid studio is a web-based application for data science with full integration of open source data science frameworks and languages.
GNU Affero General Public License v3.0
8.88k stars 1.5k forks source link

how about exec function #106

Closed ddoplayer2012 closed 4 years ago

ddoplayer2012 commented 4 years ago

function exec can do anything,and i use it to rm -fr /,then server was broken..now it is 502 bad gateway

ricklamers commented 4 years ago

Currently Grid Studio doesn't have answers to security issues. You shouldn't expose the instance to untrusted users (i.e. don't forward the port over a public network).