Fork me on GitHub
#yada
<
2018-06-15
>
emil0r07:06:28

Hi. Does anyone know if there are any plans on including clojure.spec in addition to Schema for validation/coercion/swagger for yada?

dominicm08:06:01

Not at this time. There's a chunk of work to move schema into a plugin, then it might be able to take place. There's a few open questions about security which need resolving first too.

dominicm08:06:35

I'm hoping that the stable version of spec will resolve security concerns. There's a major overhaul of spec coming, it is alpha after all!

emil0r08:06:18

What are the security concerns?

dominicm12:06:23

Spec will validate any key you send it, it's prime territory for DOS via bugged transitive dependency.

borkdude14:06:59

Schema is still great though

borkdude14:06:36

but Spec can be made closed with some extra code