Movatterモバイル変換

Talk:Opa (programming language)

Page contents not supported in other languages.

From Wikipedia, the free encyclopedia

This article has not yet been rated on Wikipedia'scontent assessment scale.
It is of interest to the followingWikiProjects:

Computing

	This article is within the scope ofWikiProject Computing, a collaborative effort to improve the coverage ofcomputers,computing, andinformation technology on Wikipedia. If you would like to participate, please visit the project page, where you can jointhe discussion and see a list of open tasks.ComputingWikipedia:WikiProject ComputingTemplate:WikiProject ComputingComputing
???	This article has not yet received a rating on theproject's importance scale.

Software:Computing

	This article is within the scope ofWikiProject Software, a collaborative effort to improve the coverage ofsoftware on Wikipedia. If you would like to participate, please visit the project page, where you can jointhe discussion and see a list of open tasks.SoftwareWikipedia:WikiProject SoftwareTemplate:WikiProject Softwaresoftware
???	This article has not yet received a rating on theproject's importance scale.
	This article is supported byWikiProject Computing.

This article was nominated fordeletion on 5 August 2011. The result ofthe discussion wasDelete.

XSS and Sql injection protection by having strong static typing?

[edit]

Opa implements strong, static typing, which can be helpful in protecting against security issues such as SQL injections and cross-site scripting attacks.^[1]

are you ******* kidding me? thetype system of the scripting language has absolutely nothing to do with how vulnerable the script is to SQL injection, or how vulnerable the site is to XSS (regardless of type system of the language, an unsanitized sql query is still an unsanitized sql query, and unsanitized text is still unsanitized text (that can include HTML/javasript/whatever for xss))Divinity76 (talk)07:35, 3 March 2013 (UTC)[reply]

References

^Robertson, William; Giovanni, Vigna (2009)."Static Enforcement of Web Application Integrity Through Strong Typing".SSYM'09 Proceedings of the 18th conference on USENIX security symposium.