Hacker News new | ask | show | jobs
by EddieJLSH 1099 days ago
What's the realistic issue with code injection over HTTPS TCP parsing into expected messages? If it is an issue for your system, can't you try read into some expected shape and throw an error if it doesn't parse to circumvent that?
1 comments

I was specifically talking about Common Lisp’s print/read functions which are not safe for untrusted input:

https://github.com/salewski/cl-safe-read/blob/master/README....