hi all.. Javascript is Turing complete, as is HTML+CSS. IOS is very restrictive yet supports these languages.. but it still seems to be too permissive according to http://langsec.org/occupy/ . Your recommendation, as i understand it, is to simplify input languages such that they can be expressed as a regular language or deterministic context-free grammar. Is my understanding correct? If so, are there any proposals wrt replacing the functionality of these languages in a manner consistent with your recommendation?
thanks, David _______________________________________________ langsec-discuss mailing list langsec-discuss@mail.langsec.org https://mail.langsec.org/cgi-bin/mailman/listinfo/langsec-discuss
