It's worth noting that Cloudflare followed this advice (whether or not they knew they were) and did not roll their own parser, and still, there was a bug. I'm p

It's worth noting that Cloudflare followed this advice (whether or not they knew they were) and did not roll their own parser, and still, there was a bug. I'm pretty sure that parser correctness and program security is mostly unrelated, and you can show this both theoretically and empirically.