Re: Changing quixote.get_field?

Neil Schemenauer <[email protected]> Mon, 12 Nov 2012 14:37:27 -0600

Newsgroups	gmane.comp.web.quixote.user
Message-ID	<[email protected]>

On 2012-11-12, Patrik Simons wrote:
> What is the motivation for returning the last field value instead of
> the first?

No strong reason.  I thought perhaps query parameters should be
treated as a sequence of assignments and therefore the last would
win out.

The question does make me think there might be some security issue
here.  E.g. code like:

    security related decision based on quixote.get_field()
    ...
    security related decision based on HTTPRequest.get_field()

OTOH, there would be lots of similar bugs that could result from
sloppy coding so maybe it doesn't matter.

  Neil