alt Hacker News> In other words, if you publish a gem on RubyGems.org, you can execute arbitrary code on RubyDoc.info.
Shades of the build.rs problem. We really need sandboxed builds in every language ecosystem at this point.
Replies
citizen204 • today at 5:08 PM
[flagged]
The sandbox was already there, Rubydoc runs yard inside docker, the problem is that container still has network access