STRING EXPLOITS

String programming is believed to be easy by programmers. This is hower not the case: several implementation / design flaws are associated with string programming, some of those are associated with security exploits.

Contents

Canonicalization problems

Example: HTML tags are not canonical

Concatenation problems

String termination

Comment out characters

Related articles (other string problems)

Canonicalization problems

Software programmers often assume that strings are canonical. This a fallacy.

Example: HTML tags are not canonical

Fallacy:
"