security - Grails/Groovy: Harms of run-app compared to using .war -
can enumerate exposing myself (and site) running/deploying grails app "grails run-app" rather doing "correctly" .war file?
grails.org saysl
grails should never deployed using grails run-app command sets grails in "development" mode has additional overheads.
is only performance, or there security issue there too?
performance big difference. if must use run-app sure run 'grails prod run-app' @ least of optimizations in place. run-app designed devloper-friendly, lots of reloading, , corresponding file system scans necessary support that.
when running in war, gsps precompiled, saves permgen , results in faster performance. there's no caching in run-app since developer don't want have restart, in production need make changes redeployment, caching more aggressive.
Comments
Post a Comment