Re: Enhancement Request: Folding Whitespace

On Sat, 27 Jun 2009 21:29:44 -0400 (EDT)
[email protected] (Bill Yerazunis) wrote:

>    Wow, this is becoming a major CRM114 web application :-)
>    Well, crm114 script has very few potential hack/0wn paths
> (compared to genpurp PHP, perl et al) so with enough plugging the
> language could get a second life there. ;-)   (crm114 as a web
> micro-language...)
> 
> Thanks!  I'm glad to see that someone has noticed my intent to build a
> language that's hard to p0wn from the data stream... "Death (or at
> least segfault) before Dishonour!".


It's been very easy securing things like arbitrary decoding depth
exploits on urlencoded strings. Just wrap the decoding routine in a
liaf loop and you're done. 

CRM is probably the only scripting language more powerful than "sed -n"
that is "deny, then allow".

Chris

------------------------------------------------------------------------------

_______________________________________________
Crm114-general mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/crm114-general

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iQEcBAEBAgAGBQJKRz1VAAoJEASgqNsqZfCHn5AH/iIomtk8QtE9iRbmxSJaonmK
eYv/a/b1WEB+pu8ont+qBawvWuEMbrnUK8QDzE5pkfOicyX79TRozVGsk3sZPam+
HOqeLsfLJV4k9a4KkZc/GPpWPspXXwI4o50r7Zb3iL0wcx7WX4Z3QCN65OuzoAU1
jg1AwI+5P6A+PqZxYFZzw7Tll6Ay6BcarMrlg0y/aQTnypm1hI69XrIeRsPmLGzE
eQi5NXcLTE0ZNdMMf5+Uru+xPO23P3rMiFiNglyY+5LhtkfO0MQt97mlx7FSpHM2
ImZT3zyUxer2PixcpDXDRmo2iFO3saVsBA2p8moeQ7OiQl1Zwb+LWavfiKtLxuY=
=R7pN
-----END PGP SIGNATURE-----