Apple's patch only partially addressed the flaw as it can still be exploited by changing the protocol used to execute the embedded commands from file:// to FiLe

Apple's patch only partially addressed the flaw as it can still be exploited by changing the protocol used to execute the embedded commands from file:// to FiLe:// At some point some manager has to look at code like that and fire the developer: "You're too FUCKING STUPID to work here!!!". Let the downvotes commence. But really, there's this eternal wailing and gnashing of teeth about hiring the right people. But then what? If they can't implement case-insensitive string checks then what, exactly, did they learn in 4 years of college?