Am 23.03.2011 11:41, schrieb Adrien:
> Just a thought about security: with default pyramid templates, paster
> is listening on 0.0.0.0 and with debug mode activated.  Wouldn't this
> be a security issue for newcomers if they are not behind a NAT or
> running a firewall ?

Yes, I'd also suggest setting host = 127.0.0.1 in development.ini_tmpl,
like it's done in Pylons and TurboGears.

Maybe the root.pt_tmpl could also indicate in some way whether the site
is running in development or production mode. I usually put such an
indicator in the master template of my TurboGears projects.

-- Christoph

-- 
You received this message because you are subscribed to the Google Groups 
"pylons-discuss" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/pylons-discuss?hl=en.

Reply via email to