Security audit of Gradio: relevant to stlite?

Question

Closed this issue 2 months ago · 2 comments

Just wondering if the security audit of Gradio is relevant for stlite?

Answer 1 · 2024-10-20T14:21:39.000Z

Thanks, I think it's not the case.

Those security audits are specific to Gradio's source code
Some reported vulnerabilities are not the problem in the Stlite environment because it's sandboxed in the web browser and is never shared between normal users and attackers.

Answer 2 · 2024-10-20T14:22:37.000Z

Notifying the report to the upstream streamlit/streamlit project may be a good action.