Defensive programming: Difference between revisions

Content deleted Content added
Removing link(s) to "Immunity-aware programming": Removing links to deleted page Immunity-aware programming.
Line 158:
'''All data is tainted until proven otherwise''' - means that all data must be handled in a way that does not expose the rest of the runtime environment without verifying integrity.
 
'''All code is insecure until proven otherwise''' - while a slight misnomer, does a good job reminding us to never assume our code is secure as bugs or [[Undefinedundefined Behaviorbehavior]] may expose the project or system to attacks such as common [[SQL injection]] attacks.
 
====More Information====