Comment by rfgplk

20 hours ago

As I've mentioned numerous times at this point, relying on third party code is a massive liability (supply chain attacks/sloppy code). My hand rolled brotli implementation is not only faster than libbrotli but also immune to this vulnerability (yes, I checked). Roll your own code people.

Would you also apply this to cryptography or, well, really any security library? Because I hope the answer will be no...