4 ms·
I see. I had thought of that more as a format for applications to store their persistent data than for data interchange. When used for the latter, the danger se
by hanche 6y ago
I see. I had thought of that more as a format for applications to store their persistent data than for data interchange. When used for the latter, the danger seems clear enough. (I also just noticed that the original post is half a year old.)
- recursivecaveat 6y agoIf you're using it for persistent storage, its probably inevitable that a user sends in their copy as part of a bug report and a developer cracks it open.
- hanche 6y agoGood point.
- dathinab 6y agoTrue but even as a interchange file format sqlite is interesting. Through you probably want some hardened against this types of attacks form of sqlite. Like one which had just a subset of features and sqlsupport.