Nice work! Just looking through the Eio code, you may want to use the capability restrictions more. For example, in the static file serving code, you can use `Eio.Path.open_subtree` which will use Linux fd sandboxing to prevent accidental symlink escapes or other ways to leave that subtree: <a href="https://ocaml-multicore.github.io/eio/eio/Eio/Path/index.html#val-open_subtree" rel="nofollow">https://ocaml-multicore.github.io/eio/eio/Eio/Path/index.htm...</a>
Will keep an eye on this project, love me some Ocaml! Do you have an example of it deployed and in use?<p>Don’t like the “fresh off the AI block” feeling of the website but could be a bit more confident if I could see it used in the actual wild!
Cool to see some Lisp in this OCaml project:<p><i>Add to your bin/dune:<p><pre><code> (executable
(name main)
(libraries spindle eio_main)
(preprocess (pps ppx_wiretype)))**</code></pre></i>
Very cool! Congrats. Looking forward to trying