-
Notifications
You must be signed in to change notification settings - Fork 20
Open
Description
Is your feature request related to a problem? Please describe.
I want to deploy EcoSonar to production, but there are security issues present.
Describe the solution you'd like
In the file: EcoSonar-API/services/lighthouse/lighthouse.js
, we can see:
export default async function lighthouseAnalysis(urlList, projectName, username, password) {
const browserArgs = [
'--no-sandbox', // can't run inside docker without
'--disable-setuid-sandbox', // but security issues
'--ignore-certificate-errors',
'--window-size=1920,1080',
'--start-maximized',
'--remote-debugging-port=36951'
];
}
I don't see how to deploy this in production with these issues. We need a feature that allows using it securely in production.
Describe alternatives you've considered
Perhaps a feature flag or an environment variable to enable sandboxing in production.
Additional context
I don't have any additional context.
Metadata
Metadata
Assignees
Labels
No labels