Hacker News new | ask | show | jobs
by panic 5862 days ago
You could even trivially convert it to XML and use XSLT, if you were silly enough. But Lisp is directly executable, so you could simply make the tag names functions that automatically transform themselves. It'd be a lot easier than using XSLT, and less than a tenth the size.

And now anyone who can modify your log can execute arbitrary code in the reader process…

1 comments

People always say that. Fortunately someone figured that out on the order of 34 years ago

[ http://en.wikipedia.org/wiki/Capability-based_security ]

(for a more recently active discussion, try http://en.wikipedia.org/wiki/Domain_Specific_Language)