3 ms·
Old style format strings are perfectly safe for arbitrary user input and commonly used as such.
by the_mitsuhiko 10y ago
Old style format strings are perfectly safe for arbitrary user input and commonly used as such.
- dom0 10y agoUser-provided format strings seem rather rare to me ; at least in scenarios where the user doesn't have full access anyway (eg. controlling output formatting of some command).