Timeline for Are there security concerns with code posted to Stack Overflow?
Current License: CC BY-SA 3.0
3 events
when toggle format | what | by | license | comment | |
---|---|---|---|---|---|
Aug 5, 2014 at 17:08 | comment | added | Steve Jessop |
@Cupcake: for that matter, the code might intentionally contain a dangerous vulnerability without "doing anything" itself. It's questionable of course whether the person who posted the code can complete the circle by attacking apps that use the flawed code. But at least in principle, people might maliciously put dodgy code out there. For that matter there could be malicious answers that don't even contain any code, just describe things in a way that the author hopes will lead to exploitable errors. Beware of those recommending strncpy ;-)
|
|
Aug 4, 2014 at 21:29 | comment | added | user456814 | Or even more fun, the code unintentionally contains dangerous security vulnerabilities, and you end up opening up your entire production website to SQL-injection, cross-site scripting, or Man in the Middle attacks. | |
Aug 4, 2014 at 21:19 | history | answered | Sam I am says Reinstate Monica | CC BY-SA 3.0 |