Re: [ClojureScript] Why isn't giving end-users a repl dangerous?

2016-09-24 Thread Brandon Adams
The users already have a javascript repl with the same abilities and permissions as the cljs repl you give them. On Sun, Sep 25, 2016 at 12:05 AM, mars0i wrote: > A good rule of thumb: One should worry that giving end-users access to a > full-fledged eval function can be

[ClojureScript] Why isn't giving end-users a repl dangerous?

2016-09-24 Thread mars0i
A good rule of thumb: One should worry that giving end-users access to a full-fledged eval function can be dangerous, because users can then do anything that the language can do, and cause damage to their own system or to others'. There are numerous Clojurescript repls embedded in public web