3 ms·
> the escaping rules for windows are so complicated (and can vary with configuration) such that it's not possible to do it securely This is bold claim. Is it
by bangaladore 2y ago
> the escaping rules for windows are so complicated (and can vary with configuration) such that it's not possible to do it securely
This is bold claim.
Is it not possible? Or not easy to do correctly?
- blibble 2y agoall the kernel passes to executables is one long string and then every program handles it in whatever way it feels is best as examples: go/java/python all process arguments slightly differently even microsoft's libc changes handling between versions given it's not possible to know what parser a specific target program is going to use: it's not possible to generically serialise an array safely
- Aachen 2y agoOkay so it's not that the rules are too complicated for mortals, it's that there are no rules and so you can't know how programs will interpret the data, so you can't write anything that would universally work. Am I understanding that right?