Skip to content

Harden configuration for security

liamdawson requested to merge liamdawson/snibox-sqlite:config-improvements into master
  • Allowing the web console to be globally accessed allows remote code execution on error pages.
    • Fix: add opt-in for global web console
  • Rails Production mode is designed to be more secure by default.
    • Fix: default to production mode, while still serving public assets

Merge request reports