2 ms·
Security in Haskell isn't especially better than any other general purpose language. You do have a lot more tools to help though. For instance, you can make you
by whateveracct 5y ago
Security in Haskell isn't especially better than any other general purpose language. You do have a lot more tools to help though. For instance, you can make your web app fail to compile if you accidentally try to serialize sensitive information to JSON or plaintext. GHC will tell you exactly where you almost had a data leak.
- bcrosby95 5y agoIt's actually a bit harder than you're implying, because any request coming to the server could have sensitive information in it. But, yes, wrapping your data helps solve some of the problem in any language. For instance, in Java we hold passwords from requests with a Password class rather than with a String class, whose .toString will return "xx" rather than the actual password.
- grumpyprole 5y agoI was asking about IHP specifically. Yes Haskell is just a tool and one could simply build PHP with it.