Out With Regex, In With Tokens

Sean Coates (03.Oct.2009)
Talk at CodeWorks 2009 (Washington) (English - US)

Rating: 4 of 5

Parsing user input, creative data, and HTML is hard. I'm sure you've whipped up some pretty creative regular expressions thatalmost work most of the time when dealing with these things, but it's often easy for attackers, or even non-maliciousend-users to trip up your carefully crafted regex and make your pages look horrible (or worse). In this talk, we'll discuss a fewpractical examples of how taking a token-based approach to parsing code and markup can save you plenty of time in the long run, andmore importantly, will actually prevent your replacements from failing.

Who are you?

Claim talk

By clicking this button you are declaring that you are the speaker responsible for it and a claim request will be sent to the administrator of the event.

If the claim is approved you will be able to edit the information for this talk.

Are you sure?

 
Comments closed.

Comments

Rating: 4 of 5

03.Oct.2009 at 14:07 by Bruce Campbell (8 comments)

Most excellent talk. Way over my head for most of it. Really liked the validation with tokens especially the simple email validation script.

Rating: 4 of 5

03.Oct.2009 at 15:43 by Eli White (70 comments)

Good talk, explained the idea of tokenizing in a way that the room really seemed to graps.

Rating: 4 of 5

06.Oct.2009 at 14:41 by Keith Casey (80 comments)

I've been working with email templates for web2project and hadn't come up with a nice clean way of handling them... this looks like a much better and cleaner strategy that I'm going to investigate.

© Joind.in 2014