~/talk

Code Generating a Safer Web with Rocket

Talkat Strange Loop 2017 · 2017-09-28..09-30· [rust, security]
slides:none on file

Rocket is a Rust web framework that uses procedural macros to generate compile‑time parsing, validation, and deserialization so there is no runtime introspection and no runtime errors for request handling. It enforces policies with request guards that only dispatch handlers when all guards pass, preventing mass‑assignment and auth bugs. The code generator produces the boilerplate, the server reaches sub‑microsecond latency and tens of thousands more requests/sec than Flask or Express in benchmarks, and thousands of users with dozens of companies run it in production.

AI-written summary · about

  1. 0:00Intro
  2. 0:35What is Rocket
  3. 2:46About Rocket
  4. 5:20Do we really need another web framework
  5. 15:40Rails vulnerability
  6. 22:35Struts attack
  7. 24:47Hello world
  8. 28:32Dynamic paths
  9. 32:01Request guards
  10. 35:06Data guards
  11. 37:30Code generation
  12. 40:05Performance
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.