that's true but especially code hosting sites, should be a bit more concerned.
Using a WAF and white listing parameters, may be a good start too.
Just another reason why I keep the code internal.
Using a WAF and white listing parameters, may be a good start too.
Just another reason why I keep the code internal.
Not really. There are many examples of sites which should be more concerned. Anything with your credit card information, say.
> Using a WAF and white listing parameters
Yeah, that's a good start. But you need to make sure everything goes through the white list, and that's the hard part.
> Just another reason why I keep the code internal.
What does this have to do with security?