6 ms·

Solid list for a quick SQL injection and XSS reference with lots of examples. Even unicode/accents/two-byte characters etc are super useful to check handling on

Solid list for a quick SQL injection and XSS reference with lots of examples. Even unicode/accents/two-byte characters etc are super useful to check handling on all the way from the front-end to the persistent storage solution (DB, etc). Lost it laughing at "Human Injection" section: > # Strings which may cause human to reinterpret worldview > If you're reading this, you've been in a coma for almost 20 years now. We're trying a new technique. We don't know where this message will end up in your dream, but we hope it works. Please wake up, we miss you.

ancarda 6y ago
I know I first came across BLNS about 5 years ago because I was 20 years old when I first saw that. Suffice to say it scared the shit out of me!
yosito 6y ago
I would wake up if I could, but I opened this string in vim and I can remember how to exit.
foresto 6y ago
> Please wake up, we miss you. I think that sentence gives itself away as modern. Were comma splices in common use 20 years ago?
- frank2 6y ago
  Yes they were. IIRC at least one of the major manuals of style endorsed them at least in some situations.
  - maxfan8 6y ago
    That’s interesting. Maybe it’s considered hyper correct? Which style manual are you referring to?
    - frank2 6y ago
      Don't remember. This was 30 or 35 years ago. There was a long tradition in English and maybe also in other European languages of choosing punctuation depending on how long a pause a speaker would take at the point, with a comma denoting a shorter pause than a semicolon, which in turn denoted a shorter pause than a colon, which in turn denoted a shorter pause than a period -- instead of using punctuation to convey some semantic distinction as most writers do today. The comma splice might be a vestige of that tradition.
      - gnramires 6y ago
        But the pauses are semantic in a way. Those concepts cannot be well separated. Not a linguist, but I can tell pauses are used by speakers and listeners for a variety of reasons, linked with both semantics and delivery -- to separate parts, to give and demarcate "processing time" for speakers and listeners, to create and satisfy expectation, etc. The cadence of speech is semantic (though its semantics are not of a simple propositional logic type).
  - cperrine 6y ago
    I've been curious about this sort of thing, but I haven't been able to find good info on it. For example, it seems to me that the format of "It's not x, it's y" is widely accepted. I'm not sure if that's by simple common use or by way of some nuance that I'm not aware of. Certainly in some cases it can be difficult to avoid both comma splices and sounding stilted. I'd love to know more -- I don't seem to recall anything about it from when I had a copy of the Chicago Manual of Style.
    - ianamartin 6y ago
      No one accepts "It's not x, it's y" as correct. Well, maybe some illiterate Philistines do. But no one really thinks that's correct. You have to put a semicolon in place of the comma or it is just plain wrong.
niklasbuschmann 6y ago
This messes with my mind
Konohamaru 6y ago
That was a bastardization of the original one on 4chan's /x/. This one is the real one: > It has been reported that some victims of torture, during the act, would retreat into a fantasy world from which they could not WAKE UP. In this catatonic state, the victim lived in a world just like their normal one, except they weren’t being tortured. The only way that they realized they needed to WAKE UP was a note they found in their fantasy world. It would tell them about their condition, and tell them to WAKE UP. Even then, it would often take months until they were ready to discard their fantasy world and PLEASE WAKE UP.
- yakshaving_jgt 6y ago
  > This one is the real one Are you sure? I think this idea has been explored in several novels and films over the past several decades.
  - dejj 6y ago
    Never seen it before on film. The Manchurian Candidate isn't it. Can you give me some pointers?
    - yakshaving_jgt 6y ago
      Doesn’t The Matrix explore this idea?
      - rsecora 6y ago
        Wake up, Neo... The Matrix has you...
        deleted 6y ago
        [deleted]
      - james-skemp 6y ago
        See also Ghost in the Shell 2: Innocence. There's a lot of hacking going on in that one leading to some very interesting scenes. Granted, they're not comatose, but the sensations their minds are receiving do not match reality.
Timpy 6y ago
Im reading Permutation City right now and that message is really messing with my head

ancarda 6y ago

I know I first came across BLNS about 5 years ago because I was 20 years old when I first saw that. Suffice to say it scared the shit out of me!

yosito 6y ago

I would wake up if I could, but I opened this string in vim and I can remember how to exit.

foresto 6y ago

> Please wake up, we miss you. I think that sentence gives itself away as modern. Were comma splices in common use 20 years ago?

frank2 6y ago
Yes they were. IIRC at least one of the major manuals of style endorsed them at least in some situations.
- maxfan8 6y ago
  That’s interesting. Maybe it’s considered hyper correct? Which style manual are you referring to?
  - frank2 6y ago
    Don't remember. This was 30 or 35 years ago. There was a long tradition in English and maybe also in other European languages of choosing punctuation depending on how long a pause a speaker would take at the point, with a comma denoting a shorter pause than a semicolon, which in turn denoted a shorter pause than a colon, which in turn denoted a shorter pause than a period -- instead of using punctuation to convey some semantic distinction as most writers do today. The comma splice might be a vestige of that tradition.
    - gnramires 6y ago
      But the pauses are semantic in a way. Those concepts cannot be well separated. Not a linguist, but I can tell pauses are used by speakers and listeners for a variety of reasons, linked with both semantics and delivery -- to separate parts, to give and demarcate "processing time" for speakers and listeners, to create and satisfy expectation, etc. The cadence of speech is semantic (though its semantics are not of a simple propositional logic type).
- cperrine 6y ago
  I've been curious about this sort of thing, but I haven't been able to find good info on it. For example, it seems to me that the format of "It's not x, it's y" is widely accepted. I'm not sure if that's by simple common use or by way of some nuance that I'm not aware of. Certainly in some cases it can be difficult to avoid both comma splices and sounding stilted. I'd love to know more -- I don't seem to recall anything about it from when I had a copy of the Chicago Manual of Style.
  - ianamartin 6y ago
    No one accepts "It's not x, it's y" as correct. Well, maybe some illiterate Philistines do. But no one really thinks that's correct. You have to put a semicolon in place of the comma or it is just plain wrong.

niklasbuschmann 6y ago

This messes with my mind

Konohamaru 6y ago

That was a bastardization of the original one on 4chan's /x/. This one is the real one: > It has been reported that some victims of torture, during the act, would retreat into a fantasy world from which they could not WAKE UP. In this catatonic state, the victim lived in a world just like their normal one, except they weren’t being tortured. The only way that they realized they needed to WAKE UP was a note they found in their fantasy world. It would tell them about their condition, and tell them to WAKE UP. Even then, it would often take months until they were ready to discard their fantasy world and PLEASE WAKE UP.

yakshaving_jgt 6y ago
> This one is the real one Are you sure? I think this idea has been explored in several novels and films over the past several decades.
- dejj 6y ago
  Never seen it before on film. The Manchurian Candidate isn't it. Can you give me some pointers?
  - yakshaving_jgt 6y ago
    Doesn’t The Matrix explore this idea?
    - rsecora 6y ago
      Wake up, Neo... The Matrix has you...
      - deleted 6y ago
        [deleted]
    - james-skemp 6y ago
      See also Ghost in the Shell 2: Innocence. There's a lot of hacking going on in that one leading to some very interesting scenes. Granted, they're not comatose, but the sensations their minds are receiving do not match reality.

Timpy 6y ago

Im reading Permutation City right now and that message is really messing with my head