4 ms·
No serizalization is safe - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-028 https://docs.microsoft.com/en-us/security-updates
by tebeka 7y ago
No serizalization is safe
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-028 https://docs.microsoft.com/en-us/security-updates/securitybu...
- https://en.wikipedia.org/wiki/Billion_laughs_attack https://en.wikipedia.org/wiki/Billion_laughs_attack
- https://en.wikipedia.org/wiki/Zip_bomb https://en.wikipedia.org/wiki/Zip_bomb
- ...
- strbean 7y agoNone of those are serialization schemes. XML can be used for serialization, but if you look at the whole ecosystem it is a Turing-complete complexity monster, so of course it isn't safe.