Python Class which checks input before passing to console (C) program
- by Joseph Melettukunnel
Hello,
We are asked to write a web-frontend (in python) for a very complex (and old) console application, written in C. Since we have no access to the C Source Code, and we assume that there might be some unsafe methods, we'd like to check the input which will the passed to the console application.
WebClient - Python Module - Console Application
Do you have any suggestions or tips what we should check for?
Right now we are only limiting the string length and filtering some (program specific) unallowed keywords.
Thanks,
Joseph
EDIT:
Will remove strings like %s because of format string attacks