Security Patterns
This realm demonstrates three defensive patterns; read the source alongside this page:
- Live-realm guard —
assertAdminpanics unlesscur.IsCurrent()holds, which checks the realm token against the live call frame before any authority is read from it. - Caller identity via
cur.Previous().Address()— the admin check reads the immediate caller, notOriginCaller(), so an intermediary realm cannot pass itself off as the user. - Sanitized render output — every value echoed below is run through
p/nt/markdown/sanitizefirst, so caller-controlled text cannot inject markdown or break out of a code span.
Admin: g125em6arxsnj49vx35f0n0z34putv5ty3376fg5
Message: Only the admin can edit this message.