#capability-security

2 pages search “capability-security” ↳ all tags

Wiki 2

  • Whitelist Capability Config Embedded-scripting design where the config language starts with zero capabilities and the host registers each one explicitly, instead of starting from a full language and removing dangerous bits
  • Whitelist Config with Rye Refaktor's case for embedding Rye in Go apps as a config language with zero hardcoded keywords and per-feature capability whitelisting