I'm still puzzled by the fact that for all this time #odoo has been using werkeug"s native HTTP server in production.
I mean the warning about not using it must have been there for something like 5 years. How many developpers saw it and thought "How screw that I don't care about security anyway" 🤦 .
Also it"s such a simple fix (doesn't appear to be when reading the MR but it is) that it should have been a no brainer.

[IMP] core: stop using werkzeug's dev server in production by Julien00859 · Pull Request #247162 · odoo/odoo
We are using werkzeug's development server as our production HTTP server, both in multi-thread and multi-process (worker mode). Werkzeug's documentation recommends strongly against using th...




