Your language' built-in server was never meant for production use The built-in or de facto web server that ships with your language hasn't been hardened against a myriad kinds of attacks, and it's irresponsible to use it outside development