News for hackers. Stuff that matters.

A comment on # of days since the last alg=none JWT vulnerability. Parent comment

Re:# of days since the last alg=none JWT vulnerability by asperous on Tuesday September 01, 2020 @07:27PM (#24348314)
They could rename it to unsafeDecode or similiar. Yaml had a similar design problem where decoding something could execute code which was unsafe. The solution was to leave the function but change the name.
[ Parent | on HN ]

There are no comments on this comment yet.