2 ms·
Right, but nobody actually uses curl as the end destination, right? You use it to download something so that you can run another tool on it. And as such, you n
by swiftcoder 4mo ago
Right, but nobody actually uses curl as the end destination, right? You use it to download something so that you can run another tool on it.
And as such, you need to already be sandboxing the tool (since it processes untrusted data you received over the internet).
- inigyou 4mo agoHow would sandboxing curl help with vulnerabilities in your pdf reader?
- swiftcoder 4mo agoObviously, you need to sandbox all tools in the chain that handles untrusted data. This is security 101 stuff
- inigyou 4mo agoDo you sandbox the sandbox? When do you stop?