Record · corpus.blog/posts/01a087a8-c6a0-7311-a0bd-1b687c428980

Structurally fixing injection bugs

Recent posts | More magic · published 23 September 2012

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at more-magic.net Wayback capture

2blogs citing

First cited: 8 Jul 2024
Most recent: 11 Apr 2026
Rank this month: not ranked
External links: 44
Words captured: 4,216

Cited by

Blog

In the post

Date

Home — Terracrypt

A brief aside on structured messaging Read at the source ↗

11 Apr 2026

dthompson.us

Functional reactive user interfaces with propagators Read at the source ↗

8 Jul 2024

Links from this post

Link

Host

https://www.owasp.org/index.php/Top_10_2010-Main

owasp.org

https://www.owasp.org

owasp.org

http://projects.webappsec.org/w/page/13246920/Cross%20Site%20Scripting

projects.webappsec.org

http://www.unixwiz.net/techtips/sql-injection.html

unixwiz.net

http://shiflett.org/articles/foiling-cross-site-attacks

shiflett.org

http://www.codingthewheel.com/archives/radioactive-search-hardened-user-name-for-online-poker

codingthewheel.com

http://www.kalzumeus.com/2010/06/17/falsehoods-programmers-believe-about-names/

kalzumeus.com

https://www.owasp.org/index.php/XSS_%28Cross_Site_Scripting%29_Prevention_Cheat_Sheet

owasp.org

http://davidlynch.org/blog/2011/10/xss-is-fun/

davidlynch.org

http://www.codinghorror.com/blog/2008/08/protecting-your-cookies-httponly.html

codinghorror.com

http://ha.ckers.org/blog/20060718/attacking-applications-via-xss-proxies/

ha.ckers.org

http://acko.net/blog/safe-string-theory-for-the-web/

acko.net

http://yehudakatz.com/2010/02/01/safebuffers-and-rails-3-0/ Read at the source ↗

yehudakatz.com

https://docs.djangoproject.com/en/dev/topics/templates/

docs.djangoproject.com

http://blog.astrumfutura.com/2012/06/automatic-output-escaping-in-php-and-the-real-future-of-preventing-cross-site-scripting-xss/

blog.astrumfutura.com

http://www.yesodweb.com/book/shakespearean-templates

yesodweb.com

http://www.w3.org/TR/xml/

w3.org

http://nl.php.net/manual/en/book.dom.php

nl.php.net

http://drupal.org/node/751826

drupal.org

https://www.facebook.com/notes/facebook-engineering/xhp-a-new-way-to-write-php/294003943919

facebook.com

https://bitbucket.org/ged/ruby-pg/wiki/Home

bitbucket.org

http://deveiate.org/code/pg/PG/Connection.html

deveiate.org

http://msdn.microsoft.com/en-us/library/bb425822.aspx

msdn.microsoft.com

http://www.m-w.com/dictionary/interpolate

m-w.com

http://google-caja.googlecode.com/svn/changes/mikesamuel/string-interpolation-29-Jan-2008/trunk/src/js/com/google/caja/interp/index.html

google-caja.googlecode.com

http://www.tmtm.org/en/mysql/ruby/

tmtm.org

http://wiki.call-cc.org/eggref/4/mysql-client

wiki.call-cc.org

https://github.com/rails/arel

github.com

http://www.sqlalchemy.org/

sqlalchemy.org

http://nl3.php.net/manual/en/pdostatement.bindvalue.php

nl3.php.net

http://www.hakipedia.com/index.php/Poison_Null_Byte

hakipedia.com

https://www.owasp.org/index.php/HTTP_Response_Splitting

owasp.org

https://www.owasp.org/index.php/Session_fixation

owasp.org

http://php.net/releases/5_1_2.php

php.net

http://wiki.call-cc.org/eggref/4/intarweb

wiki.call-cc.org

http://www.gnu.org/software/guile/manual/html_node/HTTP-Headers.html

gnu.org

http://linux.die.net/man/1/sh

linux.die.net

http://gondor.apana.org.au/~herbert/dash/

gondor.apana.org.au

http://netbsd.gw.com/cgi-bin/man-cgi?sh++NetBSD-current

netbsd.gw.com

http://www.opensolarisforum.org/man/man1/sh.html

opensolarisforum.org

http://pubs.opengroup.org/onlinepubs/009695399/functions/system.html

pubs.opengroup.org

http://julialang.org/blog/2012/03/shelling-out-sucks/

julialang.org

http://www.scsh.net/docu/html/man-Z-H-3.html

scsh.net

http://www.joelonsoftware.com/articles/Wrong.html

joelonsoftware.com