I have a question about running Streamlit web apps. For example, if I deploy a Streamlit app on Heroku, my understanding is that the app runs server-side on Heroku, while on the client side, only obfuscated javascript can be inspected via the browser. My web application contains some JSON files that my Python script accesses. My question is: can the user view these JSON files or the Python source code in any way via the browser? Isn’t there theoretically a way to de-obfuscate the obfuscated javascript code that can be viewed in the browser?
In general, no. Streamlit has a server-client structure. It does not take your code and make some equivalent Javascript for the user to run computations in their browser. All the computations are done on the server with whatever you specify for display sent to the browser.
As long as you don’t render the JSON files in some way or put them in the static folder with static hosting enabled, they would not be accessible to your users… same for your source code.
Thanks for stopping by! We use cookies to help us understand how you interact with our website.
By clicking “Accept all”, you consent to our use of cookies. For more information, please see our privacy policy.
Cookie settings
Strictly necessary cookies
These cookies are necessary for the website to function and cannot be switched off. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms.
Performance cookies
These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us understand how visitors move around the site and which pages are most frequently visited.
Functional cookies
These cookies are used to record your choices and settings, maintain your preferences over time and recognize you when you return to our website. These cookies help us to personalize our content for you and remember your preferences.
Targeting cookies
These cookies may be deployed to our site by our advertising partners to build a profile of your interest and provide you with content that is relevant to you, including showing you relevant ads on other websites.