3 ms·
Erlang could use a bit more isolation as well. For example limiting the mailbox size and limiting the memory available to a single process. Memory limits would
by deno 14y ago
Erlang could use a bit more isolation as well. For example limiting the mailbox size and limiting the memory available to a single process.
Memory limits would be great to give you some ease of mind when reusing libraries for processing input. For example processing XML, even using SAX parser, still leaves you open for attacks like huge tag values or just something more real world, huge href="data:" attributes. Obviously the right way is to have a limit in the parser (which xmerl doesn’t have, unfortunately), in this case, but it’d be nice to have some safety net from the VM as well.