You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The DHC web UI writes files to a directory. Because of this, users can import these files to use in other scripts. To do this, they need to add /data/notebooks to the python path. Adding this path by default for all users can be risky because the mechanism used to create and maintain these files is totally insecure -- any browser can edit them.
Document everything, including the vulnerability. Have instructions on how to add it and explain the reason why.
The text was updated successfully, but these errors were encountered:
The DHC web UI writes files to a directory. Because of this, users can import these files to use in other scripts. To do this, they need to add /data/notebooks to the python path. Adding this path by default for all users can be risky because the mechanism used to create and maintain these files is totally insecure -- any browser can edit them.
Document everything, including the vulnerability. Have instructions on how to add it and explain the reason why.
The text was updated successfully, but these errors were encountered: