3 ms·
I don't think rust's unsafe says anything about cryptographic security, beyond pointer-safety implications.
by setr 6y ago
I don't think rust's unsafe says anything about cryptographic security, beyond pointer-safety implications.
- nicoburns 6y agoNeither does React's dangerouslySetInnerHTML. What both of these do is mark a potentially dangerous operation with an in-your-face warning message that you have to go out of your way to ignore. Which in practice is very useful, as often the biggest problem with security issues is not know what you don't know. It's impractical to review the entire codebase on a regular basis, and it can be hard to know which bits to focus on.