4 ms·
Why is it their job to check for security? Sandboxing would make the ergonomics significantly worse for running quick scripts with uv run --script
by mvieira38 1y ago
Why is it their job to check for security? Sandboxing would make the ergonomics significantly worse for running quick scripts with uv run --script
- cipehr 1y agoI took gp’s comment to mean something more like deno. Deno is nice because you can explicitly allow/deny filesystem, network, etc. in an ergonomic way like `—-allow-fs` So not sure it would necessarily be ergonomically worse. It could even be a new run command `uv srun` or something…
- indigodaddy 1y agoBut uv isn’t a framework, isn’t that the difference, ie why they wouldn’t necessarily think it’s appropriate to delve into that particular territory?
- charcircuit 1y agoThis is like asking why do web browsers need to sandbox javascript. Giving full permissions to untrusted code is an attacker's dream.