2 ms·
In some cases, say the parser for an interpreter for a general purpose programming language, I would consider the data "trusted". You are already allowing execu
by TheCoelacanth 9y ago
In some cases, say the parser for an interpreter for a general purpose programming language, I would consider the data "trusted". You are already allowing execution of arbitrary code, so there is nothing to be gained by exploiting the parser.