This isn't crucial, but the two largest attack vectors in the app are the two text parsing systems (for Markdown and the Mustache templates). Breaking them each out into separate processes through the XPC services system would be great. Neither of them needs to have file system access of any kind (in theory), they just need to be fed string data which they will process internally.
This isn't crucial, but the two largest attack vectors in the app are the two text parsing systems (for Markdown and the Mustache templates). Breaking them each out into separate processes through the XPC services system would be great. Neither of them needs to have file system access of any kind (in theory), they just need to be fed string data which they will process internally.