4 ms·
I only skimmed over the linked resource, but non of the mentioned attack vectors and issues seem to be a problem for variable names in source code?
by ascar 8y ago
I only skimmed over the linked resource, but non of the mentioned attack vectors and issues seem to be a problem for variable names in source code?
- dragonwriter 8y agoIt enhances risks if you are doing things that are already risky, like using Ruby's dynamic facilities to either expose the user to things based on names in source (“eval” of user-submitted content, or things dynamically constructed from it, for example.) But I can't see much else that is a realistic security risk (readability and code clarity risks are another story.)