ℬ㏒.㎈ℓℯℛ.ⓧⓨℤ

Avoiding injection with taint analysis

One simple way to improve the robustness of any code base is static analysis. It’s not widely used because it carries a (regrettably well-deserved) reputation for being a noisy, blunt instrument, but with small tweaks static analysis can become part of the common development process. In this post, I will explain how we use it to improve the security of our code.

Read the full blog post at Smarkets HQ