2 ms·

> But when you talk about URL parsing in a linter or a regexp in logging code, I think you're implying that the bugs are unimportant, in part, because the code

> But when you talk about URL parsing in a linter or a regexp in logging code, I think you're implying that the bugs are unimportant, in part, because the code only handles trusted input. It is a bug but it’s not necessarily a security hole in the library. That’s what OP is saying.

comex 1y ago
Yes, that’s the OP’s main point, but their choice of examples suggests that they are also thinking about trusted input.
- scott_w 1y ago
  In the context of security holes.