3 ms·
>Because now you depend on an UUID library and its attack surface. I can appreciate reducing dependencies, but this is bordering on paranoia.
by wizhi 5y ago
>Because now you depend on an UUID library and its attack surface.
I can appreciate reducing dependencies, but this is bordering on paranoia.
- danuker 5y agoWhenever there's a "parse" method (as shown in this article), there's the possibility of poor implementation and exploitability.
- toomanydoubts 5y agoSorry, I do not get your point. If your inputs come from outside your system, you have to sanitize them, period. It would be the same thing for the original poster of this thread if the ids are being generated client-side. Besides, you're also running the risk of poor implementation for an ad-hoc system, which in my opinion is order of magnitudes larger than using a battle tested algorithm.