Re:What I’m Telling Business People About Why Relational Dat...
by vineetr on Sunday June 24, 2018 @10:50AM
(#17386763)
SQL injection falls into a general class of vulnerabilities where user input escapes the data plane and get injected into the control plane. I was looking for the article to provide insight on how a new database or query+execution language would avoid this entire class of vulnerabilities, because that is what I would expect as a solution. So yeah, picking on RDBMS for SQL injection is fairly silly, and worse, it betrays ignorance on the subject.
To extend his argument, browsers are responsible for XSS.
To extend his argument, browsers are responsible for XSS.