Follow Slashdot stories on Twitter

 



Forgot your password?
typodupeerror
DEAL: For $25 - Add A Second Phone Number To Your Smartphone for life! Use promo code SLASHDOT25. Also, Slashdot's Facebook page has a chat bot now. Message it for stories and more. Check out the new SourceForge HTML5 Internet speed test! ×

Comment Validation (Score 1) 142

Always validate what you run through eval()!

While not fool proof, making sure that what you got back from the server is JSON, and not a string of malicious code is paramount.

And guess what, such things already exist.

Granted, this doesn't prevent someone from embedding that same malicious code in valid object code that appears identical to what you expect as a server result, but its a huge step in the right direction.

Slashdot Top Deals

Like punning, programming is a play on words.

Working...