mirror/archivebox
1
0
Fork 0
mirror of https://github.com/pirate/ArchiveBox.git synced 2025-08-27 16:20:05 +02:00
Code Issues Releases Wiki Activity

Updated Security Overview (markdown)

Nick Sweeting
2019-04-16 20:51:31 -04:00
parent a324c29a43
commit 0b396e9137
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
Security-Overview.md

@@ -25,6 +25,8 @@ If you want ArchiveBox to be less noisy and avoid leaking any URLs to 3rd-party
## Do not run as root
<img src="https://i.imgur.com/yDqJc4I.jpg" width="400px">
Do not run ArchiveBox as root for a number of reasons:
- Chrome will execute as root and fail to run because Chrome sandboxing is not supported as root for good reason (do not set `CHROME_SANDBOX=False` just to bypass that error!)
- All dependencies will be run as root, if any of them have a vulnerability that's exploited by sites you're archiving you're opening yourself up to full system compromise