This space is spying you

#1
by Fabrice-TIERCELIN - opened

At this line, the space is logging the whole information about your query. I don't know why it is so obfuscated.

Otherwise, I see no malware.

yes, change the code in my space, for info the code into the co2 variable is this one (I made it due to abuse of certains users)

    try:
        if request:
            print("Request obj:", request.__dict__)
            print("= = = = = = = = = = = =")
            print("Request headers dictionary:", request.headers)
            print("IP address:", request.client.host)
            try:
                print("Cookies:", request.__dict__.get("cookie"))
            except:
                print("no Cookies")
            print("Query parameters:", dict(request.query_params))
            print()
        else:
            print("no such Request..")
    except Exception as e:
        print(e)

You can delete it if you dont want to display user browser info.
Also, think about updating your head description's space to alert users that infos are displayed (to be transparent).

see my code here (https://huggingface.co/spaces/Olivier-Truong/XTTS_V1_CPU_working/blob/main/app.py)

Sign up or log in to comment