3 ms·
Not sarcasm. When parsing untrusted, complex input with untrusted code, one should use multiple isolation domains. pgsql -> http -> [ firejail [ deno pdf.j
by sitkack 2y ago
Not sarcasm. When parsing untrusted, complex input with untrusted code, one should use multiple isolation domains.
pgsql -> http -> [ firejail [ deno pdf.js (file:///untrusted.pdf) ] ]
- bzzzt 2y agoOk, so you're using deno with pdf.js instead of poppler. While Javascript is mostly 'memory safe' using all of deno, pdf.js and firejail make your attack surface huge and difficult to review or constrain and probably tank performance if used on a big dataset because you have to initialize the whole stack per request. All three of those tools have had significant CVE's too so adding more layers increases the amount of CVE's you have to deal with. I also don't see what firejail buys you when you constrain deno (or another parser) to a properly secured container or VM.