Hacker News Reader

Let me guess... if they're a form of Lisp, did someone add jndi support, then made it possible to print to the console while the string gets read and finally made it executable because who wouldn't want a LISP for-loop in an Oracle connection string? On to the next RCE...

View on HN

Nah, they are pretty constrained data description. AFAIK, you can't even substitute environment variables.

They are also apparently very hard to use, to the point that many people can't and several web sites exist that will take your database server, username, and password and assemble a connection string for you. (I can see no issues with that! None!)

Reply on news.ycombinator.com