3 ms·
Uses Gumbo... from the README > Gumbo was initially designed for a product that worked with trusted input files only. We're working to harden this and make sur
by nly 12y ago
Uses Gumbo... from the README
> Gumbo was initially designed for a product that worked with trusted input files only. We're working to harden this and make sure that it behaves as expected even on malicious input, but for now, Gumbo should only be run on trusted input or within a sandbox.
- nostrademons 12y agoThat's mostly historical at this point - Gumbo passed a security review as of 0.9.1, has had several rounds of fuzz testing, and is used by a bunch of other libraries now. It's been struck out of the README at HEAD, though I think it was listed in several earlier versions' READMEs.