Chat & Discussions>Discussions

Securing Elixir Code

#security
Onor.io

Onor.io

Securing Elixir Code

So lately the day job has been deploying a static checking tool for checking C# code for potential security vulnerabilities. This got me thinking–is there anything in the Elixir/Erlang ecosystem to warn about problematic code from a security perspective?

Honestly I’m not even sure what problematic code would look like in terms of security but I’d love to know if anyone has done any research on the topic or started any kind of tool to help insure our code isn’t full of vulnerabilities?

2 comments
#security
14 797 2

Most Liked Responses

voltone

voltone

You can find some examples of unsafe code and possible mitigations here.

9
Post #3
BartOtten

BartOtten

Have a look at Sobelow
https://github.com/nccgroup/sobelow

4
Post #2

Where Next?

View thread on forum (has 2 responses!)
security
Home Chat & Discussions>Discussions
#security
14 801 2
Last post

Popular in Discussions Top

matthias_toepp
Chat & Discussions>Discussions

Gleam Has A New Web Framework
I’d love to hear what people think about Wisp, the new Gleam web framework started by Gleam’s primary creator Louis Pilfold. Gleam, alon...
#static-types#gleam
44 14231 10
New
pillaiindu
Chat & Discussions>Discussions

What are the caching strategies in Phoenix?
In django there is a cache framework backed by memcached. Rails also puts a lot of emphasis on caching, and even the idea of russian-doll...
/phoenix
40 12218 10
New
axelson
Chat & Discussions>Discussions

Plataformatec acqui-hired by Nubank
Decided against including more info in the title, but the gist is that Plataformatec sponsored projects will continue with the assets bei...
#elixir#plataformatec
206 9758 20
New
WildYorkies
Chat & Discussions>Discussions

Where is Elixir and the Actor Model heading?
It seems that the more I read, the more I find Elixir users speaking about all the ways that Elixir is not good for x, y, and z use cases...
#future-tech
180 11519 46
New
nunobernardes99
Chat & Discussions>Discussions

Find maximum and minimum in two dates
Hi there Elixir friends :vulcan_salute: In a recent task I was on, I needed to check in two dates which of them is the maximum and which...
#maximum
7 8204 3
New
Ankhers
Chat & Discussions>Discussions

Yet another pipe to nth argument discussion
Just a little information upfront. Generally speaking, if I feel like I need to either break a pipe chain or use an anonymous function in...
#discussion#pipe-operator
28 8841 11
New
rower687
Chat & Discussions>Discussions

Understanding the advantages of "let it crash" term
Hi all, I’ve been reading a lot about the “let it crash” term and how supervising processes and the whole messaging passing make an elixi...
100 12157 30
New
shishini
Chat & Discussions>Discussions

Elixir vs Go Performance (Anton Putra)
I think this twitter post and youtube video didn’t get as much attention as I hoped I am still new to Elixir, so can’t really judge ...
#performance
169 7104 30
New
griffinbyatt
Chat & Discussions>Discussions

Sobelow - Uncover vulnerabilities in your Phoenix projects
Sobelow Sobelow is a security-focused static analysis tool for the Phoenix framework. For security researchers, it is a useful tool for g...
/phoenix#security
109 12576 65
New
AstonJ
Chat & Discussions>Discussions

LiveView demos, examples, and sample apps thread!
Seen any cool LiveView demos, sample apps or examples? Please post them here! :003:
/phoenix#liveview
232 30566 60
New

Other popular topics Top

aadeshere1
Questions & Help>Questions

Write while loop equivalent in elixir
I have a another noob question about loop. Since elixir is immutable, while loop is not directly possible. total = 10 while total != 0 ...
#while#loop
60 28868 36
New
senggen
Questions & Help>Questions

How to fix *Bad argument in call to erlang:'++'(<<"xxx/crash.log">>, ".3") in lager_rotator_default:rotate_logfile/2 line 84*
Erlang/OTP 25 [erts-13.2.2] [source] [64-bit] [smp:8:8] [ds:8:8:10] [async-threads:1] 15:22:35.803 [error] gen_event {lager_file_backend...
#production#error#log
2 46403 2
New
albydarned
Questions & Help>Questions

Erlang and Elixir on Apple Silicon/M1 Chip
Hello all! I am typing this post from my new MacBook Pro with the M1 chip. I’m loving it so far, and will probably use it as my daily dr...
#erlang#troubleshooting
121 25019 65
New
AstonJ
Chat & Discussions>Polls

Which Neovim configuration distro do you use/recommend? (Poll)
Posting this to see if we can make things easier for people to get into Neovim. If you use Neovim and have a favourite distro please let ...
#polls#code-editors#neovim
79 13941 31
New
gshaw
Questions & Help>Questions

Idiomatic guard clause for checking not nil
What is the idiomatic way of matching for not nil in Elixir? E.g., First way: defp halt_if_not_signed_in(conn, signed_in_account) when...
#guard-clauses
13 43527 3
New
JeremM34
Questions & Help>Questions

How can I check Phoenix version?
Hello, how can I check the Phoenix version ? Thanks !
/phoenix
35 28221 8
New
Brian
Questions & Help>Questions

Import a module from a file into IEX
What is the proper way to load a module from a file in to IEX? In the python world, doing something like this pretty standard: from ....
#iex
35 32626 16
New
AstonJ
Chat & Discussions>Wikis

Phoenix LiveView Info
We’ve put together this wiki for Phoenix LiveView - please feel free to add any info you feel is worth including. What is Phoenix LiveV...
/phoenix#wiki#stickies#liveview
220 25886 73
New
WestKeys
Questions & Help>Questions

Mint vs Finch vs Gun vs Tesla vs HTTPoison etc
Currently suffering from paralysis by [HTTP client] analysis. This is rather unusual in Elixirland as there tends to be consensus on the ...
#http_client
252 22413 30
New
jononomo
Questions & Help>Questions

Websocket connection works on localhost, but get 403 error when deployed via docker
For some reason my phoenix channels are working for me in my local dev environment, but as soon as I deploy via Docker, I get a 403 error...
/phoenix#channels
8 26815 12
New
Back to top

Chat & Discussions>Discussions

Chat Discussions ❯

Latest on Elixir Forum

Elixir Forum ❯

Sponsor Spotlight

Coders51

We build reliable cloud platforms for business-critical systems.

Our Sponsors

Dashbit

Build Elixir applications with speed and confidence.

EEF

Supporting innovation across the BEAM ecosystem.

Coders51

We build reliable cloud platforms for business-critical systems.

AppSignal

Catch errors, track performance, monitor hosts and more.

Honeybadger

Real-time error tracking, performance insights, and observability for devs.

Manning

Develop your skills with books, videos, and courses.

ElixirCasts

Producing high quality Elixir screencasts since 2017.

WyewWorks

Enabling companies to succeed by building software people love.

Pragmatic Studio

Courses that'll move you from confusion to "Aha, now I get it!"

View all our sponsors ❯

Categories:

Sub Categories:

Forums

Our Sponsors

Dashbit

Build Elixir applications with speed and confidence.

EEF

Supporting innovation across the BEAM ecosystem.

Coders51

We build reliable cloud platforms for business-critical systems.

AppSignal

Catch errors, track performance, monitor hosts and more.

Honeybadger

Real-time error tracking, performance insights, and observability for devs.

Manning

Develop your skills with books, videos, and courses.

ElixirCasts

Producing high quality Elixir screencasts since 2017.

WyewWorks

Enabling companies to succeed by building software people love.

Pragmatic Studio

Courses that'll move you from confusion to "Aha, now I get it!"

View all our sponsors ❯

We're in Beta

About us Mission Statement