-
Notifications
You must be signed in to change notification settings - Fork 385
Open
Description
I'm just picking on integers right now, because that's top of mind, but:
strconv.Atoi
is almost never correct; I cover this in a few different talks- We list
strconv.ParseInt
but notParseUint
(thanks @disconnect3d for pointing that out) - We need to explain that many things take flows that are
int
but can pun those flows toint32
orint64
oruint
flavors without the compiler complaining, but can lead to various issues. I spoke about this vis-a-vis Kubernetes in my talk at OWASP Global AppSec DC.
Metadata
Metadata
Assignees
Labels
No labels