News for hackers. Stuff that matters.
Re:Unexpected security footguns in Go's parsers by conradludgate on Saturday June 21, 2025 @04:24PM (#44340488)
If a parser throwing an error due to duplicate fields causes a DoS, then the same is going to happen when it throws an error due to invalid encoding...

So, I don't think that's a relevant critique. I think any ambiguous case in parsing untrusted user input should raise an error, and anyone working on code with untrusted data should be ready to handle errors

There are no comments on this comment yet.