HN user

bugtodiffer

152 karma
Posts0
Comments129
View on HN
No posts found.
Deno 2.4 1 year ago

Yes it says it can do it, but it has been broken many times because it is shit

Deno 2.4 1 year ago

There are usecases like SSRF where I want to allow any IP, except for my internal network. They promise they can do that, but they cant.

Deno 2.4 1 year ago

It is matching strings instead of actually blocking things. That's how sandboxes were implemented when I was a kid.

E.g. --allow-net --deny-net=1.1.1.1

You cannot fetch "http://1.1.1.1" but any domain that resolves to 1.1.1.1 is a bypass...

It's crap security

Deno 2.4 1 year ago

using deno isn't good security practice, their sandbox is implemented like stuff from the 90s

I think you are confusing organizations and companies. Yes, under capitalism, companies only exist to reek in profits, but from a non-profit organization you'd expect something else...