4 ms·
There's nothing about Python that actually stops this kind of attack. It just happens to be Java this time around. But providing expansive evaluation of variabl
by bdamm 5y ago
There's nothing about Python that actually stops this kind of attack. It just happens to be Java this time around. But providing expansive evaluation of variables is definitely something Python should be concerned about. This would be a good time to check if poor patterns around logging and having untrusted strings in trusted contexts exists in your code base, no matter the language.