4 ms·
Agreed - the Deno model doesn't bring much security, because you have to grant all code in the whole app the same permissions, which for any non-trivial app wil
by continuational 4y ago
Agreed - the Deno model doesn't bring much security, because you have to grant all code in the whole app the same permissions, which for any non-trivial app will amount to "mostly everything".
First class capabilities are a much better approach, a real solution to supply chain attacks.
- vorticalbox 4y agoSure but things like web access you can grant access to just the domains your app uses and everything else is blocked same for file access you can grant is access to "views". Though most people will likely just --allow-all because it is easy.
- hayd 4y agoFor now. Realms will address this.