4 ms·
Makes me wonder what'd happen by fuzzing it. It's probably all fixed length, but the data is probably assumed safe and not escaped. Though I suppose getting acc
by MichaelGG 11y ago
Makes me wonder what'd happen by fuzzing it. It's probably all fixed length, but the data is probably assumed safe and not escaped. Though I suppose getting access to a system to figure this out would be the hard step.
- userbinator 11y agoIf it's truly handled as fixed-length then there won't be any need for escaping; that's only a concern when values are embedded into other delimited strings, like SQL. A lot of these systems definitely predate SQL. Even with SQL, using parameters is the usual way to operate on large amounts of data with fixed queries, and it avoids escaping issues entirely.
- MichaelGG 11y agoI mean escaping as in "the scanned data's FF number is then sent to a shell shell script for crediting the flight". And since it's expected that the data is just 8 alphanumeric chars, it doesn't handle anything else well. You're right there's ways to do this properly, of course. But in practise, with huge systems, people end up hooking in things here and there and forget at some point eh?