Hacker News new | ask | show | jobs
by panzi 428 days ago
> Personally, I find the idea that a compiler might be able to reach outside itself completely terrifying (Access the network or a database? Are you nuts?).

Yeah, although so can build.rs or whatever you call in your Makefile. If something like cargo would have built-in sandboxing, that would be interesting.

1 comments

You can run cargo in a sandbox.
Yeah, but I want cargo to do that for me. And tell me if any build.rs does something it shouldn't.