4 ms·
Said every author of a security bug ever. Edit: Not sure why I got downvoted. Developer #1 writes script that prompts technical user for input expecting (as pa
by dsl 13y ago
Said every author of a security bug ever.
Edit: Not sure why I got downvoted. Developer #1 writes script that prompts technical user for input expecting (as parent did) that stdin will be a local console. Developer #2 later wraps script with a web form so sales/marketing can access the tool as well.
https://www.owasp.org/index.php/Don't_trust_user_input https://www.owasp.org/index.php/Don't_trust_user_input
- adamnemecek 13y agoI guess the attack vector of you exploiting your own computer is very real. /s