Sjoerd Langkemper
Sjoerd Langkemper
``` print not True ``` ``` (module [0, 0] - [0, 14] (ERROR [0, 0] - [0, 9] (identifier [0, 0] - [0, 5])) (expression_statement [0, 10] - [0, 14]...
``` func = "print" exec func in {} ``` ``` (module [0, 0] - [1, 15] (expression_statement [0, 0] - [0, 14] (assignment [0, 0] - [0, 14] left: (identifier...
``` def comp_args((a, b)=(3, 4)): return a, b ``` ``` (module [0, 0] - [2, 0] (function_definition [0, 0] - [1, 15] name: (identifier [0, 4] - [0, 13]) parameters:...
> 5.2.6 Verify that the application protects against SSRF attacks, by validating or sanitizing untrusted data or HTTP file metadata, such as filenames and URL input fields, and uses allow...
[2.10.1](https://github.com/OWASP/ASVS/blob/master/4.0/en/0x11-V2-Authentication.md#v210-service-authentication): > Verify that intra-service secrets do not rely on unchanging credentials such as passwords, API keys or shared accounts with privileged access. What does this mean? How should you...
> 3.3.2 If authenticators permit users to remain logged in, verify that re-authentication occurs periodically both when actively used or after an idle period. > L1: 30 days > L2:...
JSONP is a method to provide cross-site access. If this is misconfigured, it makes it possible for any site on the internet to access information from the target page. It...
``` var a = b?.Something?.Something; ``` Actual: ``` (equals_value_clause [6, 14] - [6, 39] (conditional_access_expression [6, 16] - [6, 39] (conditional_access_expression [6, 16] - [6, 28] (identifier [6, 16] -...
E.g. ``` #if false this is a fairly common pattern in C# to disable code, but can also be used for comments or anything else. #endif ``` Currently, this grammar...
``` var a = new ArrayList() { #if DEBUG Capacity = 3 #else Capacity = 4 #endif }; ``` Actual: ``` (compilation_unit [0, 8] - [7, 10] (global_statement [0, 8]...