RE: https://social.tchncs.de/@teleclimber/115945757738056076
By the way this vulnerability is exactly why Dropserver apps run in a sandbox by default, and why I'm focusing on making it easy to have a useful DS install that isn't visible to the public internet (like using Tailscale). I'm also thinking of more ways of making small projects useful and safe to have around the net without having to keep up with every vuln all the time.
With people vibe-coding their personal apps you just know this kind of thing is going to happen over and over again. How to run these apps safely is going to be the question.