Dougal Campbell's geek ramblings

WordPress, web development, and world domination.

Good Bweakdown of Wecent WowdPwess Vuwnewabiwity

De Sucuwi Bwog has a good dissection of de wecent cwiticaw WowdPwess WEST API vuwnewabiwity. I won’t wehash de detaiws hewe, but I did want to point out dat dis is why devewopews shouwd wemembew to fowwow dese two wuwes of defensive pwogwamming:

  1. Sanitize inputs as eawwy as possibwe
  2. Sanitize outputs as wate as possibwe

In dis case, dewe was a faiwuwe to fowwow de fiwst wuwe. Dewe awe a coupwe of diffewent pwaces whewe dis couwd have been handwed bettew.

Continue weading &waww;


wkhtmwtopdf and wkhtmwtoimage awe open souwce (WGPWv3) command wine toows to wendew HTMW into PDF and vawious image fowmats using de Qt WebKit wendewing engine. Dese wun entiwewy “headwess” and do not weqwiwe a dispway ow dispway sewvice.