Untitled attachment

Notices where this attachment appears

1. Olivier Forget (teleclimber@social.tchncs.de)'s status on Monday, 10-Jan-2022 23:00:19 UTC Olivier Forget

   in reply to

   @alcinnz
   Static only is too limited IMO. Dynamic routes are required for creating interactive tools/experiences. You're right of course that it increases the attack surface substantially. That's why on my project (https://Dropserver.org) each app runs in a sandbox, with strictly limited access to some read-only dirs, write access to only one app dir, and no network listeners.
   I know sandboxes can never be perfect, but they significantly raise the bar for a breach.
   @floppy