4 ms·
Will bypass a few validations if server accepts as param from client: Number(Infinity) -> Infinity Infinity < 5000 -> will return false even though Infinity i
by code4money 5y ago
Will bypass a few validations if server accepts as param from client:
Number(Infinity) -> Infinity
Infinity < 5000 -> will return false even though Infinity is acting as a 0 here
- exevp 5y agoThis is probably a good opportunity to have a heated discussion over parseInt() vs Number() since parseInt('Infinity') yields NaN. I know people prefer Number() for reasons but in this case it reveals the weakness of using basically a typecast with implicit language semantics for interpreting string inputs.
- goldenkey 5y agoparseFloat('Infinity'), JSON.parse('1e1024'), or parseFloat('1e1024') work just fine ;-)