Comment by vardump
4 hours ago
That is a bit too harsh. Not all applications require those guarantees. It’s fine if you can trust the inputs.
4 hours ago
That is a bit too harsh. Not all applications require those guarantees. It’s fine if you can trust the inputs.
The inputs can never be trusted
If inputs are part of the application bundl3, they can be trusted as much as the code itself.