Re: Validators accepting null bytes (\x00)

Brian Beck wrote:
> Not sure if this has been discussed before, but I'm concerned about some
> of the string validators accepting null bytes (the character \x00).

Sorry, should have been more explicit.

I encounter this problem when I use postJSON with MochiKit to submit the
form with Konqueror, not just any form. So I'm thinking Konqueror's
JavaScript implementation is to fault, or even MochiKit.

Either way, this shows that it's possible to get null bytes across to the
server, so what should FormEncode do about them, since they are potentially
destructive? (It's not FormEncode's job to worry about SQL injection and
the like, but I'm curious if there's any good reason to allow null bytes to
be received in the first place.)

--
Brian Beck
Adventurer of the First Order



-------------------------------------------------------
This SF.Net email is sponsored by xPML, a groundbreaking scripting language
that extends applications into web and mobile media. Attend the live webcast
and join the prime developer group breaking into this new coding territory!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642