Skip to content

Commit 127a718

Browse files
authored
Update README.md
1 parent aef4bbf commit 127a718

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

README.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,7 @@ Parse strings to Julia types securely (types only, not typed data!).
99
Retrieving a type from a serialized string is a recurring task. Sometimes we can use Julia serialization, other times it is enough to store every serialized type in a dict, but if we want more flexibility, we need a parser. `eval()` solves the problem, but it has a huge cost: it is inherently insecure as it allows arbitrary code execution ([ACE on wikipedia](https://en.wikipedia.org/wiki/Arbitrary_code_execution)).
1010

1111
TypeParsers takes the easy route and internally uses `eval()`. To mitigate the security issue we validate the string before evaluation.
12-
Validation is based on Tom Short's work: https://gist.github.com/tshort/3835660
12+
Validation is based on Tom Short's work: https://gist.github.com/tshort/3835660 (check the [validation tests](https://github.com/Circo-dev/TypeParsers.jl/blob/master/test/runtests.jl))
1313

1414
## Usage
1515

0 commit comments

Comments
 (0)