Security report request enhancement

[benbowes]

Thank you for this beautiful project @dperini. It has saved me heaps of headaches.

Will there be any filling out of the security tab in the future, even though there are no dependencies for this code?

[dperini]

@benbowes thank you so much for the interest in using and suggesting security improvements to my selector engine.
I am not sure about what goes in the tab you mention, I guess that is the place to let users know about existing security issues to keep user base informed about problems and possible remediations.

FYI, related to security I currently have collected unpublished patches to add security constrains:

• limit the length of each input selector
• limit the execution time-out of each input selector
• pre-load / pre-set caching resolvers and lambdas
• pre-compiler step to improve debug

I took your answer to update current project status and what to expect next in nwsapi.

Sorry for the delay in answering, things are getting slower for me.