4 ms·
> Any time your code takes in untrusted input, it should not be written in an unsafe language. So basically just about all programs, all of the time? https://
by moxious 10y ago
> Any time your code takes in untrusted input, it should not be written in an unsafe language.
So basically just about all programs, all of the time?
https://www.owasp.org/index.php/Don't_trust_user_input https://www.owasp.org/index.php/Don't_trust_user_input
- Ar-Curunir 10y agoI agree, but people seem to feel that their code should somehow be exempt from such advice, and so sacrifice safety for performance. This leads to today's sorry state of affairs.
- llogiq 10y agoThe problem is that safety doesn't sell. If you're getting a new IoT heat lamp you look at the price and not the firmware's code. To your surprise, the first hacker coming along toasts your cat.