3 ms·
easy. show it to him and ask "in 1 to 5, how does that code look like the code you ship to production currently". any answer other than "Zero" or "wtf-look", d
by gcb 16y ago
easy. show it to him and ask "in 1 to 5, how does that code look like the code you ship to production currently".
any answer other than "Zero" or "wtf-look", do not hire.
- Natsu 16y ago> any answer other than "Zero" or "wtf-look", do not hire. What if you're hiring someone to test for XSS exploits?
- MichaelApproved 16y agoTesting for XSS exploits isn't production code so the answer should still be zero.
- Natsu 16y agoIt could certainly appear in the source of an XSS scanner that tried to inject code like that everywhere it could find.