Create a whitelist config so that only safe tasks are offered

[wildbillcat]

As is it lists ALL methods to end users. Adding a whitelist config can significantly reduce risks to higher level environments (such as production) by allowing users to scope what methods are seen and thus accessible through this gem.

IE, being able to access tasks such as db:drop in production would be a huge liability

[creeonix]

I think this should auto-deploy with next release, since it is referenced as github thing

[wildbillcat]

It won't autodeploy, bundler version locks to the git hash, but a separate PR will need to be made anyways in order so set the configuration in the application.

…

On Mon, Nov 17, 2025 at 9:47 AM Serge Bondar ***@***.***> wrote: *creeonix* left a comment (fcpeuro/rake-ui#3) <#3 (comment)> I think this should auto-deploy with next release, since it is referenced as github thing — Reply to this email directly, view it on GitHub <#3 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAIACKOOQT4ELT5O2SJEERL35HNXVAVCNFSM6AAAAACMHLHQAKVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZTKNBSGI2DMNBWGI> . You are receiving this because you authored the thread.Message ID: ***@***.***>

-- Patrick McMorran VP of Technology Strategy & Operations FCP Euro e. ***@***.*** w. www.fcpeuro.com [image: facebook] <http://facebook.com/fcpeuro> [image: linkedin] <https://www.linkedin.com/company/fcp-euro/> [image: twitter] <http://twitter.com/fcpeuro> [image: youtube] <https://www.youtube.com/fcpeuro> Every Part You Buy Is GUARANTEED FOR LIFE <https://www.fcpeuro.com?utm_campaign=signatures> [image: __tpx__]