prisma-archive / chromeless-playground Goto Github PK

Hi

I deployed chromeless serverless to AWS lambda and i am interested to deploy this package to netlify and integrate both.
I forked this repo, set environmental variables in netlify and tried to deploy, i got the following error.

7:21:10 AM: Starting deploy of directory /mnt/build-work/buildbot-329504659/repo/dist
7:21:10 AM: Failed to walk directory structure
7:21:10 AM: Finished deploying directory /mnt/build-work/buildbot-329504659/repo/dist
7:21:10 AM: Failed to deploy dist to CDN
7:21:08 AM: lstat /mnt/build-work/buildbot-329504659/repo/dist: no such file or directory

Full error below: netlify deployment error.txt

I'd like to talk about potential security risk about chromeless-playground.
Chromeless-playground is a great demo app of chromeless. However I found some potential security risks may cause economical losses through malicious abuse.
I found it is possible to access some sensitive data like REDIS_HOST and REDIS_PASSWORD. Beside that, I found your team use AWS service for redis.
There's a possibility that someone could insert a large quantity of data into redis which will jamming the site and cause incredible sums on the AWS bills.
Separate main script environment from scripts parsed from user may solve this problem.
Best wishes