3 ms·
I'm hoping there's an easy way to turn this off for the foreseeable future, to avoid all the obvious security holes this is likely to introduce.
by angelbob 10y ago
I'm hoping there's an easy way to turn this off for the foreseeable future, to avoid all the obvious security holes this is likely to introduce.
- dvirsky 10y agoYou don't have to use it, and you should not use modules you don't trust.
- angelbob 10y agoIn an ops-type capacity, I support developers. I keep up with news like this specifically to avoid winding up with modules somebody else trusts, but didn't inspect.
- dvirsky 10y agoWhat would be a must and should probably be a default, is not allowing to load modules using the network API, only via config file.