|
|
|
|
|
by bnegreve
4165 days ago
|
|
> The article confuses [...] the concepts of dynamic language, dynamic page generation, lack of proper input hygiene, and various other orthogonal issues. One of the implicit point of the article (that maybe shouldn't be implicit) is that these issues are not, in fact, orthogonal. For example this: Most of the computer languages used to write web applications such as DCMS systems contain a feature called eval, where programming instructions can be deliberately promoted from data to code at runtime. In other words, proper input hygiene is a problem because you're dealing with a language that allows execution of data (i.e. a dynamic language). |
|