assemblyscript-bson

assemblyscript-bson copied to clipboard

Is it secure?

1

https://github.com/WebAssembly/design/blob/master/Security.md >Although attackers cannot perform direct code injection attacks, it is possible to hijack the control flow of a module using code reuse attacks against indirect calls.

KOLANICH

So probably you could use `String.fromUTF8` instead this? https://github.com/nearprotocol/assemblyscript-bson/blob/master/assembly/decoder.ts#L98 [link to String.fromUTF8](https://github.com/AssemblyScript/assemblyscript/blob/master/std/assembly/string.ts#L499) [link to String#toUTF8](https://github.com/AssemblyScript/assemblyscript/blob/master/std/assembly/string.ts#L542)

MaxGraey