#expr — Public Fediverse posts

A tiny flaw in a common math eval library is opening the door to remote attacks across hundreds of projects. How did a simple overlook snowball into a security crisis—and what fixes can save the day?

https://thedefendopsdiaries.com/understanding-and-mitigating-the-expr-eval-javascript-library-rce-vulnerability/

#rce
#javascriptsecurity
#cve202512735
#opensource
#cybersecurity
#vulnerabilitymanagement
#expr-eval
#remotecodeexecution
#securitypatch

I think programming languages should implement placeholder syntax as a formal part of the language.

For instance, you could say <#EXPR#> is an expression. Then, when people give code examples where they leave a placeholder for an expression, using <#EXPR#> is going to be parseable and syntax-highlighted, instead of only sometimes being usable.

For instance:

<#TYPE#> get_<#IDPART#>(<#FNARGS#>) {
<#ID#> = 7;
}

Working with Numbers: Sandra Henry-Stocker explains how to use expr and other helpful commands on the Linux command line https://www.fosslife.org/math-linux-command-line #numbers #math #Linux #OpenSource #CommandLine #FOSS #expr