Skip to content

Request for Secure browser Launch Options for Production Deployment #38

@AlexTraveylan

Description

@AlexTraveylan

Is your feature request related to a problem? Please describe.
I want to deploy EcoSonar to production, but there are security issues present.

Describe the solution you'd like
In the file: EcoSonar-API/services/lighthouse/lighthouse.js, we can see:

export default async function lighthouseAnalysis(urlList, projectName, username, password) {
  const browserArgs = [
    '--no-sandbox', // can't run inside docker without
    '--disable-setuid-sandbox', // but security issues
    '--ignore-certificate-errors',
    '--window-size=1920,1080',
    '--start-maximized',
    '--remote-debugging-port=36951'
  ];
}

I don't see how to deploy this in production with these issues. We need a feature that allows using it securely in production.

Describe alternatives you've considered
Perhaps a feature flag or an environment variable to enable sandboxing in production.

Additional context
I don't have any additional context.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions