News for hackers. Stuff that matters.
Re:Every Sufficiently Advanced Configuration Language Is Wrong by renox on Saturday June 25, 2022 @04:22PM (#31878419)
If you need this, you can split your application in two parts: one which creates the objects, then these objects are serialised to a 'configuration file formats' which can be audited and then used by the 'real' application.

IMHO this kind of audit is useless because even if one option has the expected value what guarantees do you have that this option is used as expected? Well you have to audit the code!

There are no comments on this comment yet.