News for hackers. Stuff that matters.

A comment on Passwords for JetBlue accounts cannot contain a Q or a Z. Parent comment

Re:Passwords for JetBlue accounts cannot contain a Q or a Z by _kst_ on Wednesday May 14, 2014 @12:15PM (#7744513)
How does Perl CGI code make it possible to "shell out" to the OS? I'm sure it can do so if the application isn't coded carefully, but how difficult is it to avoid doing the equivalent of passing user input to eval()?
[ Parent | on HN ]
Re:Passwords for JetBlue accounts cannot contain a Q or a Z by area51org on Thursday May 15, 2014 @02:02AM (#7748045)
It's not hard to avoid that, but in the nascent days of the web, few people were thinking that way. We were naive in our code. Sloppy, quickly written Perl was the norm.
[ Parent | on HN ]