If you can’t trust users, who can you trust? :D I wonder if it was a “necessary” fault: I can imagine someone going “let’s validate this string and terminate i

If you can’t trust users, who can you trust? :D I wonder if it was a “necessary” fault: I can imagine someone going “let’s validate this string and terminate if it’s invalid”. That mitigates security problems very effectively, however it’s clearly actually a bad thing if you can trigger it trivially in a semi-permanent manner. Projects like webkit and blink aggressively use release asserts on internal invariants that should not happen, but they’re not triggered on raw inputs.