When you choose Python: General, there is no port selection, so the Docker extension configures non-root access by default. This will allow VS Code to configure the Dockerfile with non-root access and prevent a malicious user from elevating permissions in the container, ultimately obtaining host machine root access. For this reason, we recommend selecting the default port for Python: Django (8000) or Python: Flask (5000) when executing the Add Dockerfiles to Workspace command, or opting for a port greater than 1023. When containerizing an application for production, your goal should be to port existing code into a separate runtime environment without introducing unforeseen security concerns. Configure IntelliSense for cross-compiling.
