News for hackers. Stuff that matters.

A comment on Naughty Strings: A list of strings likely to cause issues as user-input data. Parent comment

Re:Naughty Strings: A list of strings likely to cause issues... by inopinatus on Sunday January 15, 2017 @07:22PM (#13407403)
I noticed earlier in the file that the Javascript had been chosen to be benign. "DROP TABLE users" doesn't seem to fit with that spirit. I'd want it to be instantly evident but also non-destructive, or at least reversible. How about renaming the table instead?

(Sure, people generally shouldn't use this test input outside of a discardable testing environment, but if we could rely on "People shouldn't..." clauses to govern behaviour then much of this list would be unnecessary anyway.)

[ Parent | on HN ]
Re:Naughty Strings: A list of strings likely to cause issues... by Arnavion on Sunday January 15, 2017 @08:11PM (#13407589)
Already an issue: https://github.com/minimaxir/big-list-of-naughty-strings/iss...
[ Parent | on HN ]
Re:Naughty Strings: A list of strings likely to cause issues... by schlowmo on Sunday January 15, 2017 @09:26PM (#13407870)
Comment by the reporter of that issue (ro31337):

> "Dropping a table is like checking a gun without bullets. It should not work, but just don't put it against your head while testing."

[ Parent | on HN ]