How to prevent streamlit showing sensitve server information

[wk_dev]

Summary

My streamlit app did not pass Pen test because it sent some server information to client as shown in the red box belows.

Does anyone know how to prevent streamlit showing sensitve server information?

[dataprofessor]

Hi @wk_dev

There’s a relevant post here with a detailed answer:

Hey i have a serious issue about storing things in the session state

Hi folks! Streamlit developer experience PM here. Thanks for raising this and the great questions. Just to clarify answers on a couple of the questions for session_state specifically: Values your app stores in session_state are NOT sent to the browser or otherwise available client-side in any way. These only live on the server. Widget values (e.g. the value on your st.slider) originate in the client and thus could be accessed there, and these will also be stored in session_state, but th…

However, if you’d like to file a GitHub issue reporting this, the link would be here.