4 ms·
It’s an open source library that the author made for free in its free time. You either accept it as it is (check its License file), improve it, or walk away and
by tkiolp4 5y ago
It’s an open source library that the author made for free in its free time. You either accept it as it is (check its License file), improve it, or walk away and use something else.
- lazide 5y agoThat’s all we’ll and good when it doesn’t have the equivalent of camouflaged knives sticking out at eye level. Yikes.
- technion 5y agoI agree that this particular issue is extremely obvious and quite poor, but in the particular given link we're responding to their response was more than reasonable.
- couchand 5y agoHmm... commentor raises concern that string manipulation dressed up as prepared statements is potentially a source of SQL injection vulnerabilities. Maintainer dismisses concern as "FUD". Eight years later, article is posted showing an exploitable SQL injection vulnerability. I'm thinking they should have listened rather than getting defensive.
- merb 5y agoWell the first sentence is the problem, not the second.