2 ms·

I don't know! But if this sort of thing can happen in Chrome, I think it's a pretty strong counterargument to "let's standardize formats in terms of a C impleme

by pvg 6y ago

I don't know! But if this sort of thing can happen in Chrome, I think it's a pretty strong counterargument to "let's standardize formats in terms of a C implementation of a thing that parses a complicated language, among many other things".

rhencke 6y ago
XML has been a source of countless vulnerabilities, yet we continue to use it as a standard.
- pvg 6y ago
  XML has its own problems but 'has a single canonical implementation in a big hairball of C' is not among them.
- viraptor 6y ago
  Non-C implementations of XML don't have countless vulnerabilities. There's XXE and schema requests which are language independent, but otherwise... it's ok.