3 ms·
Jsonnet is much easier to make secure than JS. Untrusted JS needs to be run in a sandbox, can be insecure and contain side effects (e.g. read from the file syst
by atombender 8y ago
Jsonnet is much easier to make secure than JS. Untrusted JS needs to be run in a sandbox, can be insecure and contain side effects (e.g. read from the file system). Jsonnet can be statically guaranteed to not just be safe, but side-effect-free.