3 ms·
Because it's the format string, which the programmer is supposed to control? NSLog(untrusted); bad. NSLog("The user entered %s", untrusted); OK.
by lmz 13y ago
Because it's the format string, which the programmer is supposed to control?
NSLog(untrusted); bad. NSLog("The user entered %s", untrusted); OK.