3 ms·

If we really cared we'd only ship data and not code

• saagarjha 7y ago
  That's assuming that parsers don't have bugs in them.
• lonelappde 7y ago
  Code is data. There is no technical difference, only human interpretative models.
  • jcranberry 7y ago
    He's obviously talking about shipping only non-executable data.
    • 693471 7y ago
      Correct
    • stordoff 7y ago
      Still, is there a difference? If there is a bug in the parser, trip it and what was once non-executable might be executable.
      • allset_ 7y ago
        Yes. Without executable client side code you can't do things like heap spraying.
        • saagarjha 7y ago
          Oh, you totally can. You just have to do it by tricking the parser into going it for you.