The FancyFileServer is a training project designed exclusively for learning DevOps techniques. This application is intentionally "weak by design". It contains known security flaws to facilitate learning about:
- Insecure container configurations
- Weak password handling
- Etc.
⚠️ DO NOT use this in a production environment or with sensitive data.
Because this project is for educational purposes, we handle security reports differently:
- If you find a vulnerability: Please do not report it via public issues.
- Submission: Use the GitHub Security Advisory feature to report the flaw.
- Educational Goal: We may choose to keep certain vulnerabilities open if they serve a specific learning objective, but we will document them as such.
Only the current main branch is maintained.