1
Programs / Re: QBJS - Import code from external .bas files
« on: April 15, 2022, 05:34:06 pm »
First thought: that is very cool.
Sober second thought: what are the security implications ? For example, what happens if an imported file from some source is maliciously modified?
It would be good to well-document whatever risks, and how to mitigate risks. (I'm no web guy, so my security hat is very much of the base-level-amateur kind.)
I would only import into my programs source code in my control (i.e. my web domain), but I think I'd be okay with the mechanism for running, sandboxed, a program that is hosted wherever.
Sober second thought: what are the security implications ? For example, what happens if an imported file from some source is maliciously modified?
It would be good to well-document whatever risks, and how to mitigate risks. (I'm no web guy, so my security hat is very much of the base-level-amateur kind.)
I would only import into my programs source code in my control (i.e. my web domain), but I think I'd be okay with the mechanism for running, sandboxed, a program that is hosted wherever.