4 ms·
> (zeroth paragraph) Exactly. Security check lists become unnecessary when the program is designed to be correct right from the start. > (first paragraph) Th
by catnaroek 10y ago
> (zeroth paragraph)
Exactly. Security check lists become unnecessary when the program is designed to be correct right from the start.
> (first paragraph)
The real problem is that we do a very poor job of embedding languages inside each other. For example, HTML parsers must contain special provisions to handle that embedded JavaScript. </tag> might no longer be a terminator, because it could appear inside a JavaScript string literal. This is terrible design! I don't even like Lisp, but Lispers do have a point when they say using S-expressions would avoid all of these issues.
- tannhaeuser 10y agoWorse, actually: <script> content is only terminated by </script> and not other end-element tags, but <!-- --> comments within script content are treated as JavaScript comments [1] (though I'm not aware of template approaches that need to compose the content of script elements). [1] http://sgmljs.net/docs/html5.html#script-data http://sgmljs.net/docs/html5.html#script-data