4 ms·
Isn’t log input being untrusted input an opinion? Because in an alternative universe, they could have chosen to treat log messages like SQL where parameters ar
by thrashh 5y ago
Isn’t log input being untrusted input an opinion?
Because in an alternative universe, they could have chosen to treat log messages like SQL where parameters are passed separately.
Obviously some people must believe that logs should be trusted input, otherwise we wouldn’t be in this situation.
That said I consider both logs and error exceptions as untrusted input, but purely on practicality.
- zenexer 5y ago> Because in an alternative universe, they could have chosen to treat log messages like SQL where parameters are passed separately. They did chose to do this. The vulnerability arises even when this is done correctly. Pseudocode: log("example: %s", userInput) This is still vulnerable. The parsing that exposes the vulnerability occurs on both the format string and userInput here.