You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
We list strconv.ParseInt but not ParseUint (thanks @disconnect3d for pointing that out)
We need to explain that many things take flows that are int but can pun those flows to int32 or int64 or uint flavors without the compiler complaining, but can lead to various issues. I spoke about this vis-a-vis Kubernetes in my talk at OWASP Global AppSec DC.
I'm just picking on integers right now, because that's top of mind, but:
strconv.Atoiis almost never correct; I cover this in a few different talksstrconv.ParseIntbut notParseUint(thanks @disconnect3d for pointing that out)intbut can pun those flows toint32orint64oruintflavors without the compiler complaining, but can lead to various issues. I spoke about this vis-a-vis Kubernetes in my talk at OWASP Global AppSec DC.