Search Apps Documentation Source Content File Folder Download Copy Actions Download State String Boolean Number Struct Map Slice Pointer Function Closure Reference Nil Package Type Interface Unknown

Security Patterns

This realm demonstrates three defensive patterns; read the source alongside this page:

  1. Live-realm guard — assertAdmin panics unless cur.IsCurrent() holds, which checks the realm token against the live call frame before any authority is read from it.
  2. Caller identity via cur.Previous().Address() — the admin check reads the immediate caller, not OriginCaller(), so an intermediary realm cannot pass itself off as the user.
  3. Sanitized render output — every value echoed below is run through p/nt/markdown/sanitize first, so caller-controlled text cannot inject markdown or break out of a code span.

Admin: g125em6arxsnj49vx35f0n0z34putv5ty3376fg5

Message: Only the admin can edit this message.