MHLoppy@fedia.io to Programmer Humor@programming.dev · 1 month agoisInHell = 'true'fedia.ioimagemessage-square83fedilinkarrow-up1680arrow-down14file-text
arrow-up1676arrow-down1imageisInHell = 'true'fedia.ioMHLoppy@fedia.io to Programmer Humor@programming.dev · 1 month agomessage-square83fedilinkfile-text
minus-squarepHr34kY@lemmy.worldlinkfedilinkarrow-up6·1 month agoThe backend and frontend on the product I work on are like this. As long as you remember that booleans are not strings and should always be parsed if they are, this won’t be a problem. I am yet to see a boolean.parse() implementation in the wild that is case sensitive.
minus-squarecomputergeek125@lemmy.worldlinkfedilinkEnglisharrow-up2·1 month agoThe could be using .js and .py files directly as config files and letting the language interpreter so the heavy lifting. Just like ye olde config.php. And yes this absolutely will allow code injection by a config admin.
The backend and frontend on the product I work on are like this.
As long as you remember that booleans are not strings and should always be parsed if they are, this won’t be a problem.
I am yet to see a boolean.parse() implementation in the wild that is case sensitive.
The could be using .js and .py files directly as config files and letting the language interpreter so the heavy lifting. Just like ye olde config.php.
And yes this absolutely will allow code injection by a config admin.