Timeline for Is single quote filtering nonsense?
Current License: CC BY-SA 4.0
12 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Feb 8, 2019 at 14:40 | comment | added | IMSoP | @schroeder I'm not sure how much more related they could be. "Should we X?" "If Y, then yes". | |
| Feb 8, 2019 at 14:39 | comment | added | schroeder♦ | @IMSoP the 2 statements you quoted are not related to each other in any way | |
| Feb 8, 2019 at 14:39 | comment | added | Joshua | But in this case, a large quantity of answers saying the pentesters are wrong is desirable. | |
| Feb 8, 2019 at 14:38 | comment | added | Joshua | @scheoeder: It's pretty much a dupe of other answers but NAA should only be used if even if it were the only answer it is bad. | |
| Feb 8, 2019 at 14:38 | comment | added | IMSoP | @schroeder I'm not sure what you mean by "meta abstraction". The literal text of the question ends "Shall we reject implementing input validation for single quotes for the reasons I stated?" The literal text of this answer ends "In this case ... you can happily ignore that result". It's not the most detailed answer, but it is an answer. | |
| Feb 8, 2019 at 14:34 | comment | added | schroeder♦ | @Joshua the OP specifically challenges the frame in a very detailed way, so again, I'm no sure what this answe ris providing. | |
| Feb 8, 2019 at 14:33 | comment | added | schroeder♦ | @IMSoP that's not the question at all, that's a meta abstraction of the question. If that is in fact the question, then the OP self-answers (the OP outlines this very answer). | |
| Feb 8, 2019 at 14:28 | comment | added | IMSoP | @schroeder The question is "What should I do about this report from a Penetration Test?" This answer says "Check if it's a genuine vulnerability, and if not, ignore it as a false positive." I'm not sure why that would be a tangent. | |
| Feb 5, 2019 at 16:36 | comment | added | Joshua | @schroeder: He says in two ways "so you could type a single quote in, now where is the vulnerability?" and the second challenges the frame that filtering out single quotes is good for security. | |
| Feb 5, 2019 at 12:14 | comment | added | schroeder♦ | This answer doesn't actually address the question. The question is not about the testing methodology, but how to filter. Please make sure that your answers address the question directly. We love different perspectives and information, but this appears to be a tangent. | |
| Feb 5, 2019 at 10:15 | review | First posts | |||
| Feb 5, 2019 at 11:49 | |||||
| Feb 5, 2019 at 10:14 | history | answered | Jason Leaman | CC BY-SA 4.0 |