3 ms·
I figured that one out, but --- evaluate? mocha? expression?
by david-given 10y ago
I figured that one out, but --- evaluate? mocha? expression?
- cscheid 10y agomocha has a naughty german word in its middle, I'm fairly sure.
- slrz 10y agoAs a German native speaker, I'm unable to figure it out.
- guitarbill 10y agoNo it doesn't. I believe it can be used for Javascript injections like 'eval' as 'mocha' is/was common a test framework. At least that's the ostensible reason Yahoo replaced 'eval' with 'review', 'mocha' with 'expresso', and 'expression' to 'statement' way back in 2002 [0]. [0] https://www.newscientist.com//article/dn2546-email-security-filter-spawns-new-words https://www.newscientist.com//article/dn2546-email-security-...
- HalfwayToDice 10y agothose puzzled me too
- manarth 10y agoThe commit message explains that the terms are verbatim from Wikipedia [1]. Wikipedia [2] attributes it to a Yahoo email filter "which automatically replaced Javascript-related strings with alternate versions, to prevent the possibility of cross-site scripting in HTML email". [1] https://github.com/minimaxir/big-list-of-naughty-strings/commit/e6bd41791e4143b532e9a6ddbfbd620f1d6eaa81 https://github.com/minimaxir/big-list-of-naughty-strings/com... [2] https://en.wikipedia.org/wiki/Scunthorpe_problem https://en.wikipedia.org/wiki/Scunthorpe_problem