It seems like this is the equivalent of making the compiler a setuid program, wh... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

skybrian on July 26, 2015 | parent | context | favorite | on: The Confused deputy

It seems like this is the equivalent of making the compiler a setuid program, which nobody would do nowadays.

lvh on July 27, 2015 [–]

That's true, but confused deputy problems are still an extremely common class of issues, if not the most common.

gruez on July 27, 2015 | [–]

ie. CSRF

Consider applying for YC's Fall 2026 batch! Applications are open till July 27.
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact