4 ms·
You can do the same thing in Java with reflection. Don't let users run untrusted code. Full stop. If you need templating use a sandbox like jinja2.
by brianwawok 10y ago
You can do the same thing in Java with reflection.
Don't let users run untrusted code. Full stop.
If you need templating use a sandbox like jinja2.
- Godel_unicode 10y agoThe discovered vulnerability manifested itself in jinja2. Edit: release notes https://www.palletsprojects.com/blog/jinja-281-released/ https://www.palletsprojects.com/blog/jinja-281-released/
- brianwawok 10y agoExactly it's already fixed. It's in the article.