Opa 安全性和错误修复
我正在考虑看看 Opa。虽然我对构建 Web 应用程序的常用方法感到满意，但该项目似乎非常有趣，并且自动处理客户端-服务器通信是一个真正的优点。
我唯一担心的是安全问题。如果发现新类型的攻击或漏洞，我通常可以自己采取预防措施。如果我开发 Opa 应用程序怎么办？
我猜 MLState 会非常迅速地做出反应，添加错误和安全修复，但这种保证足够吗？公司规模不大，可能还有其他事情的压力。
Opa projecst 是否足够灵活，允许我自己修补安全错误？
I am considering having a look at Opa. While I am comfortable with the usual way of building web applications, the project seems very interesting, and having the client-server communication handled automatically is a real plus.
My only concern is about security. If a new type of attack or vulnerability is discovered, I can usually take precautions myself. What if I develop an Opa application?
I guess MLState will react very promtply to add bug and security fixes, but is this assurance enough? The company is not huge, and they may be under pressure for other things.
Are Opa projecst flexible enough to allow patching security bugs on my own?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（1）
一位 MLstate 员工发言:)。很高兴您喜欢 Opa 背后的概念。现在回答问题。
当然，我们会尽力尽快解决任何安全漏洞。您是否可以自己修补安全漏洞？ Opa 是完全开源，因此没有什么可以阻止您对编译器进行分叉并在您的计算机上进行自己的修复。自己的步调。在这种情况下，我们当然希望您向我们发送一个补丁以包含在官方分支中。这能回答你的问题吗？
one of MLstate employees speaking :). Glad you like the concepts behind Opa. Now on to the question.
Of course we will try our best to address any security vulnerabilities as fast as possible. If you can patch security bugs on your own? Opa is fully open source so nothing stops you from making a fork of the compiler and making your own fixes at your own pace. In which case of course we'd hope you'd send us a patch to be included in the official branch. Does that answer your question?