Re:Parse, Don’t Validate
by hnick on Thursday November 07, 2019 @09:37PM
(#21479548)
I wonder why Taint Checking (https://en.wikipedia.org/wiki/Taint_checking) never caught on in more languages.
[ Parent
| on HN ]
I mean, I’ve got a pretty good idea why it never caught on in English...
It pre-dates the slang term by quite a while, unless it was around back in 1989? I don't recall seeing that online until the last decade or so.
Wiktionary has it as far back as 1972, see https://en.wiktionary.org/wiki/taint.
Dictionary.com claims it dates back to at least 1977, but I have no idea.
Seems less useful in languages with strong static type systems?
It requires a language with dependent types, like Idris.
I don't think it does require dependent types, actually. Can't it be implemented as a monad? (possibly https://hackage.haskell.org/package/Tainted)
It exists in Perl. So I figure it can be implemented in any language.