3 ms·
> escape data to prevent it from being interpreted as code What about too much data? Overflow is a concern, too. Escaping is just one solution, so I shot for
by Xurinos 16y ago
> escape data to prevent it from being interpreted as code
What about too much data? Overflow is a concern, too. Escaping is just one solution, so I shot for the more general rule.
- pornel 16y ago> What about too much data? Overflow is a concern Buffers are not supposed to overflow with trusted data either, so again, security is subset of correctness. "Not trusting" data only prevents exploit from reaching vulnerable code, it doesn't fix the vulnerability. Don't write web applications C? ;)