3 ms·
Aye. "Consider every ambiguity of technology as a personal marketing opportunity." The true topic at hand is that text substitution in scripted services is an
by _wire_ 3y ago
Aye.
"Consider every ambiguity of technology as a personal marketing opportunity."
The true topic at hand is that text substitution in scripted services is an eternal hazard of code injection.
The point that regex-based input sanitization doesn't work because everyone misunderstands the token semantics for string termination is made to look like a marvelous mitigation, but this teaching on regex is distracting from an unavoidable hazard of scripting.
Good news for the contractor: he appears like Jesus to shine the Lord's light on the sin of the fathers while dancing by the moral hazard of the priesthood.
Elsewhere another instance of the OP is a service provider pushing business solutions based on the ease of use of scripted service frameworks ("Input sanitization is as simple as a regex!)
These hazards are going to get much worse as AI merges the causes of and solutions to these ambiguities into the same semantic mush.