Re: taint
| From: | Stefan Esser | Date: | Wed, 16 Sep 2015 14:38:07 +0000 |
| Subject: | Re: taint | ||
| References: | 1 2 3 4 5 6 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-88245@lists.php.net to get a copy of this message | ||
Good morning,
> ==8<--------------------------
> Taint is blacklisting.
>
Last time I checked marking all user input as tainted and requiring
"untainting" before usage in sensitive functions is whitelisting and not
blacklisting.
Regards,
Stefan
--
SektionEins GmbH stefan.esser@sektioneins.de
Breite Str. 159 Tel: 0221 / 29282931
50667 Köln Fax: 0221 / 29282935
http://SektionEins.de/
Firmensitz Breite Str. 159 50667 Köln
Registergericht Amtsgericht Köln HRB 59950
Geschäftsführer: Stefan Esser, Benjamin Fuhrmannek, Christian Horchert