Hacker News
new
|
past
|
comments
|
ask
|
show
|
jobs
|
submit
login
SahAssar
on Feb 26, 2019
|
parent
|
context
|
favorite
| on:
Show HN: Zero – A fast, zero-configuration server ...
In this case the application also tries to auto-install dependencies, so making it read-only removes one of the stated features.
I think this framework hasn't been written with security in mind at all.
adrusi
on Feb 26, 2019
[–]
Whatever it's doing, it's not writing the packages into the application directory.
SahAssar
on Feb 26, 2019
|
parent
[–]
If it can write to the applications dependencies isn't that as good as writing to the application?
Guidelines
|
FAQ
|
Lists
|
API
|
Security
|
Legal
|
Apply to YC
|
Contact
Search:
I think this framework hasn't been written with security in mind at all.