2 ms·
This is what code reviews are for.
by jiggawatts 3y ago
This is what code reviews are for.
- MattPalmer1086 3y agoYes, those are needed too. And static analysis and dynamic analysis, etc. Despite all of that we just found a SQL injection that existed for years somehow. Luckily the WAF blocked attempts to exploit it until we could issue a fix. Defence in depth is the win here.