I just wrote a blog posts on security assumptions. I realized there was a huge missing assumption. (This has since been updated.) Assume that all input can be malicious Today I want to show the most common mistake, and exploit that I have ever seen. It impacts all languages and all ...
More...