I have an existing simple web server coded using Python's CGI module and I am running it on a security hardened Raspberry Pi. Since the Python CGI module has been deprecated, I am rewriting the code to use Flask, which I have just started learning. Flask generates a warning that this is a development server and that I should not use it for production deployment. The reference I am following also states that the Flask development server is not secure enough to run in a production environment. If I use the Flask development server as my production server, is this any less secure than using the python CGI module? In other words, does simply rewriting the existing code to use Flask instead of CGI add security vulnerabilities? Continue reading...
