Re: CGI scripting (in 8th)

From	Paul Rubin <no.email@nospam.invalid>
Newsgroups	comp.lang.forth
Subject	Re: CGI scripting (in 8th)
Date	2015-10-13 23:18 -0700
Organization	A noiseless patient Spider
Message-ID	<87wpuq0y7n.fsf@jester.gateway.sonic.net> (permalink)
References	<mvj2f0$fug$1@dont-email.me> <23b5d12d-b247-4d73-9f5e-a7349190d984@googlegroups.com> <mvji1k$k36$1@dont-email.me> <0ab7a893-c262-4846-91d4-05192916f5b5@googlegroups.com> <mvknm3$l8d$1@dont-email.me>

Show all headers | View raw

Ron Aaron <rambamist@gmail.com> writes:
> On 10/13/2015 21:53, foxaudioresearch@gmail.com wrote:
>> Its the perception that the entire machine is accessible from within Forth.
> Ah.  Well, 8th doesn't have any more machine access than any C
> program... so the same caveat would apply to a CGI program written in C.

The concern with C is that it's possible for malicious client programs
to inject arbitrary code into a running C cgi that's buggy, such as by
overwriting return addresses on the stack to point into data buffers
that the client sent.  "Safe" languages like Python and (cough) Java
prevent these attacks by a mixture of more compile time type safety and
more runtime checks against out-of-range subscripts and the like.  As
Elizabeth explained, it's possible to do that in Forth by redefining
Forth's low-level memory access words to check for safety, etc.  But I
thought 8th was more like a scripting interpreter that checked
everything by default.  That would make it safer than C.

Thread

CGI scripting (in 8th) Ron Aaron <rambamist@gmail.com> - 2015-10-13 16:56 +0300
  Re: CGI scripting (in 8th) foxaudioresearch@gmail.com - 2015-10-13 10:51 -0700
    Re: CGI scripting (in 8th) "Elizabeth D. Rather" <erather@forth.com> - 2015-10-13 08:05 -1000
      Re: CGI scripting (in 8th) foxaudioresearch@gmail.com - 2015-10-13 11:54 -0700
    Re: CGI scripting (in 8th) Ron Aaron <rambamist@gmail.com> - 2015-10-13 21:22 +0300
      Re: CGI scripting (in 8th) foxaudioresearch@gmail.com - 2015-10-13 11:53 -0700
        Re: CGI scripting (in 8th) "Elizabeth D. Rather" <erather@forth.com> - 2015-10-13 11:57 -1000
        Re: CGI scripting (in 8th) Ron Aaron <rambamist@gmail.com> - 2015-10-14 08:04 +0300
          Re: CGI scripting (in 8th) Paul Rubin <no.email@nospam.invalid> - 2015-10-13 23:18 -0700
            Re: CGI scripting (in 8th) Ron Aaron <rambamist@gmail.com> - 2015-10-14 09:25 +0300
            Re: CGI scripting (in 8th) anton@mips.complang.tuwien.ac.at (Anton Ertl) - 2015-10-14 09:33 +0000
    Re: CGI scripting (in 8th) anton@mips.complang.tuwien.ac.at (Anton Ertl) - 2015-10-14 09:50 +0000
      Re: CGI scripting (in 8th) foxaudioresearch@gmail.com - 2015-10-15 11:31 -0700

csiph-web