Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
slaymaker1907
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
26 ms
·
301.
▲
by
slaymaker1907
4y ago
It's very annoying to do that though since that introduces a bunch of logic in the application and also removes the benefit of being able to read the strings in the XML as a human.
302.
▲
by
slaymaker1907
4y ago
Yeah, that's why I consider it to be a breeding ground for vulnerabilities. People will probably just assume the XML serializer can handle any strings in their language of choice and not handle those edge cases. What I ended up doing f
303.
▲
by
slaymaker1907
4y ago
Most languages (C#, Java, Rust, JavaScript, etc.) support nulls in the middle of strings so it can be a security vulnerability if you try to serialize untrusted input to XML. I'd much rather be able to encode anything my input language
304.
▲
by
slaymaker1907
4y ago
The current XML standard is hot garbage since it completely disallows null characters even via "