4 ms·
> What's needed is to impose on programming languages, outside of comments, checks similar to the checks made for domain names. But this attack works by placin
by varajelle 5y ago
> What's needed is to impose on programming languages, outside of comments, checks similar to the checks made for domain names.
But this attack works by placing characters inside comments and srings. So these checks would not help preventing this particular attack.
- Animats 5y agoThey say that, but don't really justify that claim. That's more about string literals that do something other than just display, such as URLs.