Comment by smt88 | Hacker News Reader

Top New Best Ask Show Jobs

Comment by smt88 | Hacker News Reader

I don't know who uses it, but there is a site that has been tracking Rust's maturity for web servers for years.

https://www.arewewebyet.org

The answer wasn't "yes" until the last year or two.

But what Rust web framework would not have showstopper bugs like this?

a) Actix Web

https://github.com/actix/actix-web/issues/2810

https://github.com/actix/actix-web/issues/2782

https://github.com/actix/actix-web/issues/2774

b) Rocket

https://github.com/SergioBenitez/Rocket/issues/1405

c) Warp

https://github.com/seanmonstar/warp/issues/937

https://github.com/seanmonstar/warp/issues/798

d) Tide

https://github.com/http-rs/tide/issues/853

Literally every web framework ever in every language has been littered with issues. What point are you trying to make?

I'm trying to find secure web framework. Is there any?

Most of these are "nice to have" security features or defaults rather than massive holes. Frameworks should have good security, but you also need to protect yourself from things like slow loris DoS in your own code. You need to add these protections when using any framework.

yeah i personally don't know anyone using in production, so i was a bit curious. Thanks for the link :)

Reply on news.ycombinator.com