Conversation

#Deno is great but one fail is the design of the --allow-net flag.

As best I can tell you can not allow outbound requests to arbitrary hosts and ports without allowing the script to create *listeners* on any IP and port. Yikes.

I raised an issue about this in 2019(!) and it was stale-botted into oblivion.

https://github.com/denoland/deno/issues/2705

In a server environment, letting a script creeate listeners is really not a good #security practice...

@deno_land any thoughts?