On Saturday, June 11, 2016 at 10:29:05 PM UTC+2, Joey Eremondi wrote: > > elm-package could require package names to be at a certain "distance" from >> one another > > > That still doesn't resolve the problem of running arbitrary code. If our > community gets big enough that I don't know and trust every author from > this mailing list, we need a way to stop people from being malicious. >
Ok, this is a good enough reason not to have it in the core, but this is not a reason not to do it at all. Plus, you assume that all elm code is only ment to be running in the browser. But it already run on node with tests or in the repl, and I'm expecting a lot of people starting to release node-elm-packages soon. It'll just fell into the whitelist processus, as it always should when it comes to native code. -- You received this message because you are subscribed to the Google Groups "Elm Discuss" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
