So according to the
README, the purpose of this file is to implement the PHP built-in webserver.
However, when you open the file, you can see the following from line 35:
/** * Caution, this is very experimental stuff * no guarantee for working result * has tons of potential big security holes */
That comment is kind of super scary and assuming that the setup host point to
/ instead of
/pub that file can easily be accessible by adding
So here are my questions:
- what are the risks of keeping that file unprotected ?
- is there any evident security holes as stated in the comment ?
- why would Magento ship a software with such a file if it's super experimental ?