News for hackers. Stuff that matters.
Re:Parse, Don't Validate (2019) by recursive on Tuesday March 07, 2023 @04:05PM (#35061204)
I mean, if chairs were things with formal specifications, and that specification said so, yeah.

But in this universe, no.

Re:Parse, Don't Validate (2019) by girvo on Tuesday March 07, 2023 @06:46PM (#35063081)
If you can completely ignore HTTP request data that happens to not perfectly meet the RFC at your work (or, more specifically for us, Modbus RTU responses), I salute you. Sadly, I can’t, we get some wild stuff that we still need to attempt to handle. Both HTTP and Modbus!