4 ms·
I thought you could type a URL executing a "flag" action, but pg uses continuations for these. So continuations on the web have some positive security implicati
by ntoshev 17y ago
I thought you could type a URL executing a "flag" action, but pg uses continuations for these. So continuations on the web have some positive security implications.
- mahmud 17y agoIt has absolutely nothing to do with continuations. You can always secure any HTTP request of any method: example.com/flag?article=729801 example.com/item?id=729801&flag=true example.com/article/729801/flag etc, etc. One word: sessions. You can roll out whatever ACL-scheme you want over sessions.
- Zak 17y agoI just had a look at news.arc and found that articles have a nokill field. I didn't see any code to integrate the jobs feature with news. I'm going to assume that's absent from the public release, and that it automatically sets the nokill flag.