3 ms·
IMO I don’t think the actual feature is bad. I think the real problem is that some people consider logging messages data that must be sanitized (like SQL) whil
by thrashh 5y ago
IMO I don’t think the actual feature is bad.
I think the real problem is that some people consider logging messages data that must be sanitized (like SQL) while others don’t.
And when you mix these two groups of people, we have very major problems.
- ev1 5y agoif at least anything "downloading executable code from elsewhere and running it" needs to be severely, excessively opt in behaviour. the actual feature feels incredibly strange to me as someone that has written in a ton of languages and always explicitly treated it as a plain text string unless very explicitly intended to format it