How to run a service as a user who can't delete or update or create a file
- by neeraj
Mongodb is a web based console to try out Mongodb.
I have created something similar to try out nodejs. In nodejs I am accepting user input and then I am performing eval on that command. Given the power of nodejs , someone from web console can create a file, delete files on the system or could execute 'rm -rf '.
I was thinking will it be okay if I…