News for hackers. Stuff that matters.

A comment on Parse, Don't Validate (2019). Parent comment

Re:Parse, Don't Validate (2019) by aidenn0 on Tuesday March 07, 2023 @03:03PM (#35060430)
To an extent, that sounds like saying the thing I am sitting in is not a chair since it has 5 legs.
[ Parent | on HN ]
Re:Parse, Don't Validate (2019) by recursive on Tuesday March 07, 2023 @04:05PM (#35061204)
I mean, if chairs were things with formal specifications, and that specification said so, yeah.

But in this universe, no.

[ Parent | on HN ]
Re:Parse, Don't Validate (2019) by girvo on Tuesday March 07, 2023 @06:46PM (#35063081)
If you can completely ignore HTTP request data that happens to not perfectly meet the RFC at your work (or, more specifically for us, Modbus RTU responses), I salute you. Sadly, I can’t, we get some wild stuff that we still need to attempt to handle. Both HTTP and Modbus!
[ Parent | on HN ]