3 ms·
You are asking for security issues if you take this approach. Better to increment on several small iterations of dependencies, making changes accordingly, such
by booleanbetrayal 5y ago
You are asking for security issues if you take this approach. Better to increment on several small iterations of dependencies, making changes accordingly, such that you will be able to take a CVE-fixing patch without having to refactor your entire app all at once.
- kortex 5y agoIntroducing changes to the semantics of query operators in minor releases sounds like a great way to introduce security issues. How many CVEs over the years are because of someone screwing up their operator precedence in permissions checks?