4 ms·
The right solution is pervasive programming language support for interpolation inside XML/HTML code. Like there is in JavaScript now, known as JSX. Like HHVM ha
by pwdisswordfish4 6y ago
The right solution is pervasive programming language support for interpolation inside XML/HTML code. Like there is in JavaScript now, known as JSX. Like HHVM has, in the form of XHP. (Interesting that both are Facebook innovations.)
The industry didn't defeat SQL injection through more permissive query parsers, but by generating queries via ORMs and parametrised templates instead of dumb string concatenation.
Also, have you noticed that JSON injection bugs are almost never heard of? That's because in many programming languages this very problem comes pretty much pre-solved before you even add any JSON support to them.