Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Tools and guidelines for dealing with untrusted input #850

Closed
dtolnay opened this issue Apr 6, 2017 · 2 comments
Closed

Tools and guidelines for dealing with untrusted input #850

dtolnay opened this issue Apr 6, 2017 · 2 comments
Assignees
Labels

Comments

@dtolnay
Copy link
Member

dtolnay commented Apr 6, 2017

So far there are three vulnerabilities that may affect formats that deserialize untrusted data:

To the extent possible, let's provide helper code or guidelines to help formats protect against these.

@dtolnay
Copy link
Member Author

dtolnay commented Apr 6, 2017

@nikomatsakis mentioned he might have a research paper to send me. 😉

@dtolnay dtolnay added this to the v1.0 milestone Apr 6, 2017
@dtolnay dtolnay added the docs label Apr 9, 2017
@dtolnay dtolnay self-assigned this Apr 18, 2017
@dtolnay dtolnay removed this from the v1.0 milestone Apr 18, 2017
@mathstuf
Copy link
Contributor

mathstuf commented Oct 3, 2017

See also dtolnay/serde-yaml#77.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Development

No branches or pull requests

2 participants