Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> we need to think deeply why is that

That's because the nginx inputs have a much more homogeneous type than your random django-based system.

I'm not sure there's anything you can learn from that. Some use-cases just lead to more secure software than others, and this is a completely non-actionable piece of information.



As they said, it's attack surface. The static site does one thing; the Django site does more things. This is the use-case difference you're talking about: the more your code does, the more likely it is to have vulnerabilities. And it's actionable: make your code do as few things as possible.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: