Security flaw with default settings

[hankthetank]

The arg --no-sandbox is hardcoded in the get_chrome_args() and can't be overwritten easily. This setting is a huge security flaw. Please make sure that we can override this and remove it from the default settings.

def get_chrome_args(): return [ settings.CHROME_PATH, '--no-sandbox', # Avoids permission issues while dockerized. '--headless', '--disable-extensions', # Reduces startup overhead. '--disable-gpu', # Required by chrome's headless mode for now. ]