Re: [Health-dev] HMIS running on outdated werkzeug in production?

[Gerald Wiese]

Hey,

this is about the version of werkzeug.

What about the documentation saying not to use werkzeug in production? 
Is this neglectable if putting a reverse proxy in front anyway or is 
this actually a problem and uWSGI or something should be put between 
reverse proxy and application?


On 31.03.22 16:02, Dr. Axel Braun wrote:
> Hi Gerald,
>
> Am Donnerstag, 31. März 2022, 13:06:22 CEST schrieb Gerald Wiese:
>   
> > Following the documentation/standard packages werkzeug is used, actually
> > even an outdated version of werkzeug.
> Yes, this was already subject of discussions:
> https://discuss.tryton.org/t/trytond-6-0-and-werkzeug-2-x/4530
>
> I do not share the view of the Tryton maintainers, that, once released, all
> packge versions are carved in stone
>
> > I think we should change this...
> I think so as well
> https://build.opensuse.org/package/view_file/Application:ERP:GNUHealth:4.0/
> trytond/fix_werkzeug_2.x.patch?expand=1
>
> Cheers
> Axel