3 ms·
Isn't there a risk, that someone can (accidentally or not) enter hash-code of someone else's "closure"?
by malkia 20y ago
Isn't there a risk, that someone can (accidentally or not) enter hash-code of someone else's "closure"?
- mdakin 20y agoOne could avoid that problem by keeping track of the owner of each closure and ensuring the user is properly authenticated before calling the closure.
- pg 20y agoThe code explicitly protects against that.
- papersmith 20y agoIf access to the closures are session-specific, you'll have to hijack the session to do that.