3 ms·
Sure it can be used safely. Appropriately sanitize inputs, don't pass things through the shell, pretty typical stuff.
by Diederich 6y ago
Sure it can be used safely. Appropriately sanitize inputs, don't pass things through the shell, pretty typical stuff.
- throw_away 6y agoalso, taint checking built into the language to enforce sanitization: https://en.wikipedia.org/wiki/Taint_checking https://en.wikipedia.org/wiki/Taint_checking
- throwaway823882 6y agoThis feature is one of those things that proves that the technology industry is bullshit. There's an entire industry, probably worth hundreds of billions of dollars, built around trying to detect insecure code and force it to be less insecure. Meanwhile, this one old language that nobody uses has a single option you enable to be [more] secure by default. And I'll bet you a billion dollars the reason other languages don't have it is "the design doesn't look very clean".
- fallat 6y agoIf anything no input interpretation should happen, everything should just go directly to the program, and the program should not be capable of file operations. stdin/stdout only.