Re: Top 10 vulnerable languages for web app

[Norman Worth <nworth@comcastNOSPAM.net>]

On 12/4/2015 11:10 AM, mockturtle wrote:
> Not strictly Ada-related, but I guess of some interest to this group...
>
> According to the following article
>
>     http://thehackernews.com/2015/12/programming-language-security.html
>
> Veracode published a report (available at https://goo.gl/QVSF1t , registration required) about vulnerabilities in web applications. PHP is at third place, after ColdFusion and Classic ASP (never heard of them...)
>
> One thing caught my attention in the article.  It says:
>
>    "...The security researchers crawled popular web scripting languages including
> PHP, Java, JavaScript, Ruby, .NET, C and C++, Microsoft Classic ASP, Android,
> iOS, and COBOL"
>           ^^^^^
>
> COBOL a scripting language?!?
>
> Enjoy
>
> Riccardo
>
The lesson seems to be that typical interpretive scripting languages are 
dangerous for the web.  Note that C and C++, while a bit vulnerable, are 
far safer than the scripting languages, and that interpreted languages 
are more susceptible to the more dangerous maladies like code insertion 
and command insertion.  Not surprising, really, when you consider how 
they work.