5 ms·
While true, we really should be treating every single piece of external code as though it's malicious.
by fnimick 1y ago
While true, we really should be treating every single piece of external code as though it's malicious.
- tsimionescu 1y agoNo, we shouldn't. We live in a society, and that level of distrust is not just unrealistic, it's disastrous. This doesn't mean you should share your house keys with every drive by PR contributor, but neither should you treat every PR as if it's coming from Jia Tan.