Re: [Health-dev] HMIS running on outdated werkzeug in production?

[Mathias Behrle]

* Gerald Wiese: " Re: [Health-dev] HMIS running on outdated werkzeug in
  production?" (Thu, 31 Mar 2022 16:26:58 +0200):


> What about the documentation saying not to use werkzeug in production? 
> Is this neglectable if putting a reverse proxy in front anyway or is 
> this actually a problem and uWSGI or something should be put between 
> reverse proxy and application?

The latter.

JFTR this is also the topic of
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=998319
and it is planned in the near future to provide a package setting this
automatically up for Debian.



-- 

    Mathias Behrle
    MBSolutions
    Gilgenmatten 10 A
    D-79114 Freiburg

    Tel: +49(761)471023
    Fax: +49(761)4770816
    http://www.m9s.biz
    UStIdNr: DE 142009020
    PGP/GnuPG key availabable from any keyserver, ID: 0xD6D09BE48405BBF6
    AC29 7E5C 46B9 D0B6 1C71  7681 D6D0 9BE4 8405 BBF6

pgpTKvqfSQ8uM.pgp
Description: Digitale Signatur von OpenPGP