3 ms·
That only works if you can turn your entire web application into a Nix build process, which is unrealistic at best. Nix is wonderful as a build tool, but it's q
by soraminazuki 7y ago
That only works if you can turn your entire web application into a Nix build process, which is unrealistic at best. Nix is wonderful as a build tool, but it's quite a stretch to assume it's adequate for securing running applications. Plain containers, or even better, VMs are more suited for that purpose.
- Ericson2314 7y agoYour unsandboxed web application can perform a sandboxed nix build based on user input used in a very specific way. This contains the dangerous bit.