Understand the optional development API
The Development page has an option to enable an API for recompiling and rebuilding Zotonic. The model implements actions for recompiling, flushing caches, and refreshing indexes and translations.
These calls cause changes even though they are exposed through model GET paths. They are intended for a controlled development setup and can be available without authentication when enabled. Do not enable them just to use the admin tools or ordinary command-line commands.
If an integration needs this API, inspect the current m_development implementation and constrain access to the development environment. Disable it when the integration is no longer needed.