Comments on: Best Practice: Consider External Data Feeds Untrusted http://www.veracode.com/blog/2009/05/best-practice-consider-external-data-feeds-untrusted/ Application security testing, analysis, and metrics Fri, 10 Feb 2012 12:18:17 +0000 hourly 1 http://wordpress.org/?v=3.3.1 By: Erzengel http://www.veracode.com/blog/2009/05/best-practice-consider-external-data-feeds-untrusted/comment-page-1/#comment-2739 Erzengel Wed, 06 May 2009 06:16:17 +0000 http://www.veracode.com/blog/?p=760#comment-2739 Looks like they fixed it, I'm getting the NYT article when I click the link. It is a rather ironic article for it to happen on. Looks like they fixed it, I’m getting the NYT article when I click the link. It is a rather ironic article for it to happen on.

]]> By: kingthorin http://www.veracode.com/blog/2009/05/best-practice-consider-external-data-feeds-untrusted/comment-page-1/#comment-2734 kingthorin Tue, 05 May 2009 19:21:30 +0000 http://www.veracode.com/blog/?p=760#comment-2734 It's a simple programming fact that input (whether from a user, file, or another site) should not be trusted. nytimes.com is IMHO guilty of a 21st century cardinal sin, they blindly syndicated content without any validation of the input. It’s a simple programming fact that input (whether from a user, file, or another site) should not be trusted.

nytimes.com is IMHO guilty of a 21st century cardinal sin, they blindly syndicated content without any validation of the input.

]]> By: Andre Gironda http://www.veracode.com/blog/2009/05/best-practice-consider-external-data-feeds-untrusted/comment-page-1/#comment-2723 Andre Gironda Mon, 04 May 2009 23:58:25 +0000 http://www.veracode.com/blog/?p=760#comment-2723 External content coming through the integration or business tiers is a serious issue and one that web application security scanners and web application firewalls are very poor at solving (since they focus only on the content between the client tier and presentation tier, i.e. HTTP or SSL). External content coming through the integration or business tiers is a serious issue and one that web application security scanners and web application firewalls are very poor at solving (since they focus only on the content between the client tier and presentation tier, i.e. HTTP or SSL).

]]>