4 ms·
I'm not sure why avoiding arbitrary code execution during install is important when you're going to do arbitrary code execution shortly after. What else is the
by xapata 10y ago
I'm not sure why avoiding arbitrary code execution during install is important when you're going to do arbitrary code execution shortly after. What else is the purpose of installing a package?
- theptip 10y ago> For the non-install case, like when you're running a package index You have just ignored the point that your parent point was making. It's not the install case that they were complaining about.
- xapata 10y agoTrue. It's surprising to optimize for such a rare kind of user.
- baq 10y agotrying to not run arbitrary code on the enterprise network is prudent.
- xapata 10y agoBut that'd happen anyway when the installed package gets executed.