Escaping Insanity
By Tom Hukins
Date: Saturday, 12 December 2015 09:40
Duration: 20 minutes
Target audience: Beginner
Language: English
Tags: beginners data escaping perl5
You can find more information on the speaker's site:
Perl makes it easy to process data, handling the flow of information between different systems in different formats.
Unfortunately, it's easy to make mistakes when passing data around. Encoding problems lead to unreadable text; escaping problems lead to security holes.
Such problems apply to all programming languages, not just Perl. This talk will describe the general principles of escaping data, then explain how to better manage escaping problems, sometimes avoiding the need to escape data.
We will look at things like system calls, opening files, SQL queries, constructing URLs, outputting data in HTML and serialising to formats like XML and JSON.
With luck we will have a little time to spare at the end for questions.
Attended by: Gianni Ceccarelli (dakkar), Tom Hukins, Lukas Mai (mauke), Lee Johnson, Daniel Mita (m.dango), Dagfinn Ilmari Mannsåker (ilmari), Adam Taylor (adam-_-), Gillian Forster, Lance Wicks, Adrian Faiers, Theo van Hoesel (vanHoesel), Aaron Crane (arc), cjbradford, Rick Deller (PerlRick), Pavel Vodopyan, Pete Houston, Dinis Rebolo (drebolo), Tony Edwardson, Yiannis Belias, Dimosthenis-Andreas Kyriakidis-Karakolis (Specchio), Hugo Areias (hugoareias), Christopher Hanna (Chad), Katherine Spice, Edward Higgins, Søren Lund (slu), Michael Jemmeson (michael),
