cybersecurity

3242 readers

2 users here now

An umbrella community for all things cybersecurity / infosec. News, research, questions, are all welcome!

Community Rules

Be kind
Limit promotional activities
Non-cybersecurity posts should be redirected to other communities within infosec.pub.

Enjoy!

founded 1 year ago

MODERATORS

shellsharks@infosec.pub

tweedge@infosec.pub

npm search RCE? - Escape Sequence Injection (blog.solidsnail.com)

submitted 11 months ago by solidsnail@infosec.pub to c/cybersecurity@infosec.pub

2 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] solidsnail@infosec.pub 1 points 11 months ago

That is very true.
I do think that there's more depth to it than that. For example, dealing with it on the end of the terminal will probably break compatibility, and dealing with it on the app end will require every single dev to start sanitizing this. The challenges are real.