3 ms·
> Of course JS isn't a great language for this. A malicious program could spider the object graph looking for something valuable. Deno can provide extra syntax
by jonny_eh 6y ago
> Of course JS isn't a great language for this. A malicious program could spider the object graph looking for something valuable.
Deno can provide extra syntax or annotations for imports to allow the dev to explicitly allow permission per-import. These can be in the source code, or in a config file.
- kevincox 6y agoHow would this work exactly? How do you control what module's permission to use for any IO? For example what if you have a callback library that calls a function that does IO? What if you pass an IO function directly as a callback? (For example File.close) If it is the file where the call is textually written how do you handle dynamic calls? (or are they forbidden). I think the capability model is probably the right one here.