Make Werkzeug debug mode opt-in instead of debug=True #7

New Issue

tonym · 2026-06-06T19:58:11Z

tonym commented

2026-06-06 19:58:11 +00:00

Severity: medium
Category: security
Location: app.py:2870

Problem

app.run(debug=True) in the main block enables the interactive debugger (arbitrary code execution) if anyone runs python app.py directly on the NAS.

Suggested fix

Gate it: app.run(debug=os.environ.get('FLASK_DEBUG')=='1').

Filed by automated code review.

**Severity:** medium **Category:** security **Location:** `app.py:2870` ### Problem `app.run(debug=True)` in the __main__ block enables the interactive debugger (arbitrary code execution) if anyone runs `python app.py` directly on the NAS. ### Suggested fix Gate it: `app.run(debug=os.environ.get('FLASK_DEBUG')=='1')`. _Filed by automated code review._

tonym added the

security

severity:medium

labels 2026-06-06 19:58:11 +00:00

tonym referenced this issue from a commit

2026-06-06 21:38:23 +00:00

Add in-app Settings page for secrets; move Gmail creds out of source

Sign in to join this conversation.