8 ms·
security nightmare; sometimes you don't want consumers to execute code arbitrarily
by yawnxyz 2y ago
security nightmare; sometimes you don't want consumers to execute code arbitrarily
- moralestapia 2y agoNot true. Google, Meta, ... do it at a massive scale, no issues. It's not really hard to protect yourself against that. Any (competent) security guy can give you like 4 ways to implement it properly.
- rererereferred 2y agoDo you mean the ads they serve that contain malware?
- hifromwork 2y agoI am a (hopefully competent) security guy, please don't run arbitrary code if you can help it. Especially for something as trivial as JSON patching.
- kevin_thibedeau 2y agoThis is what makes Tcl great as a data interchange format. It comes with a safe mode for untrusted code and you can further restrict it to have no control flow commands to be non-Turing.
- crabmusket 2y agoOk hear me out, what if my API accepts WASM fragments that I run against my database but in a sandbox!