Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Isn't there a risk, that someone can (accidentally or not) enter hash-code of someone else's "closure"?



One could avoid that problem by keeping track of the owner of each closure and ensuring the user is properly authenticated before calling the closure.


The code explicitly protects against that.


If access to the closures are session-specific, you'll have to hijack the session to do that.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: