3 ms·
Wouldn't simply stripping comments before doing any other processing solve the problem? I know there are plenty of programs that sprinkle code into comments, fr
by SavantIdiot 5y ago
Wouldn't simply stripping comments before doing any other processing solve the problem? I know there are plenty of programs that sprinkle code into comments, from Emacs to linters. Or is this obviously naive?
Seems to me that if you need to put code in the comments, you've got a bigger problem. I know people like tab hints and lint overrides, but maybe it is time to focus on separation of concerns at a higher level?
- josephcsible 5y ago> Wouldn't simply stripping comments before doing any other processing solve the problem? No, because the exploit line doesn't contain a comment. It just looks like it does.