News for hackers. Stuff that matters.

A comment on OpenBSD system-call-origin verification.

Re:OpenBSD system-call-origin verification by blinskey on Sunday December 22, 2019 @05:55PM (#21860195)
Folks interested in this sort of news might also enjoy the OpenBSD Journal, which covered this recently, albeit more succinctly: https://undeadly.org/cgi?action=article;sid=20191202105849
[ Parent | on HN ]
Re:OpenBSD system-call-origin verification by claudiawerner on Sunday December 22, 2019 @06:29PM (#21860378)
Totally off-topic, but it's interesting how the URL uses ; as the GET parameter separator rather than &.
[ Parent | on HN ]
Re:OpenBSD system-call-origin verification by pas on Sunday December 22, 2019 @08:05PM (#21860782)
The internal syntax and semantics of the query part is not really defined by HTTP. (https://tools.ietf.org/html/rfc3986#section-3.4)

Also:

"Historic RFC 1866 (obsoleted by RFC 2854) encourages CGI authors to support ';' in addition to '&'"

https://en.wikipedia.org/wiki/URL#cite_note-23

[ Parent | on HN ]