Contribute Media
A thank you to everyone who makes this possible: Read More

When "Arbitrary Code Execution" is "Working As Intended": What Code is Python *Supposed* To Execute

By Glyph

Description

When somebody can trick your program into running arbitrary code, that is the worst kind of security bug. But of course, your program has to run some code or it's not much of a program. So how do we tell the difference between the two?

Details

Improve this page