3 ms·
I don't know why this is a good advice at all. If you have exposed APIs, you should prevent malicious payloads and what happens when the parser can be broken t
by madduci 2y ago
I don't know why this is a good advice at all.
If you have exposed APIs, you should prevent malicious payloads and what happens when the parser can be broken through invalid data, causing also Out of Memory exceptions?
It might work only if you have some safe guardrails around the APIs, but just exposing naked endpoints, without a minimum of checks or a Web Application Firewall, this isn't a real good advice
- Smaug123 2y agoObviously if you've written a buggy parser then all bets are off, just as all bets are off if you've written bugs into any other part of your program. But those bugs would probably still be there if you didn't explicitly parse the input - they'd just appear later on, mixed in with your business logic which is performing ad-hoc parses whenever it needs the data!