3 ms·
If I call eval(string) am I emitting unescaped user input to the eval function? I guess the definition of "injest" here is reading bytes off the wire?
by tlrobinson 10y ago
If I call eval(string) am I emitting unescaped user input to the eval function?
I guess the definition of "injest" here is reading bytes off the wire?
- john_reel 10y agoIf string is unescaped user input, then yes, you are.