3 ms·
There's a classic injection attack when interpolating in the SQL query Also as others have mentioned RGB space and human perceptible color space is different e
by snemvalts 6y ago
There's a classic injection attack when interpolating in the SQL query
Also as others have mentioned RGB space and human perceptible color space is different enough that distance in RGB doesn't equate to difference/similarity between colors
- dkarp 6y agoCan you be more specific on the SQL query attack? I can't see any client data in the query, so how would anything be injected?
- helloiloveyou 6y agoNo, it isn't. What is interpolated in the string comes from an object containing predefined set of strings. I don't allow the user to type anything they want. I didn't want to clutter the tutorial