forked from tableau/TabPy
-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
* Update about.md Minor text change. * Revert "Update about.md" This reverts commit 18ecbb5. * Minor text edits. Let's see if I finally have VS configured properly to get the word wrapping issues which have caused stupid build breaks resolved. * Text request as per NMannheimer. * Update security.md * Update security.md
- Loading branch information
1 parent
fd5ffc7
commit fc5a883
Showing
3 changed files
with
19 additions
and
16 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,15 +1,18 @@ | ||
# TabPy Security Considerations | ||
|
||
The following security issues should be kept in mind as you use TabPy with Tableau: | ||
|
||
- tabpy_tools client does not validate that the tabpy server cert is signed | ||
by a trusted CA | ||
- REST server and Python execution context are the same meaning they share | ||
Python session, e.g. HTTP requests are served in the same space where | ||
user scripts are evaluated. | ||
- Python scripts can contain code which can harm security on the server where | ||
the TabPy is running. For example: | ||
- Access file system (read/write) | ||
- Install new Python packages which can contain binary code | ||
- Execute operating system commands | ||
- Open network connections to other servers and download files | ||
If security is a significant concern within your organization, | ||
you may want to consider the following as you use TabPy: | ||
|
||
•The REST server and Python execution share the same Python session, | ||
meaning that HTTP requests and user scripts are evaluated in the | ||
same addressable memory and processor threads. | ||
•The tabpy_tools client does not validate that the tabpy server | ||
certificate is signed by a trusted CA. | ||
|
||
Python scripts can contain code which can harm security on the server | ||
where the TabPy is running. For example, Python scripts can: | ||
|
||
•Access the file system (read/write). | ||
•Install new Python packages which can contain binary code. | ||
•Execute operating system commands. | ||
•Open network connections to other servers and download files. |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters