lua-users home
lua-l archive

[Date Prev][Date Next][Thread Prev][Thread Next] [Date Index] [Thread Index]


Are there any checks to prevent a user from setting values for *unused* variables? If arbitrary values assigned to arbitrary variables are persisted then that could be used to conduct a denial of service attack by assigning long strings to different variables over multiple requests. Maybe _vars should *not* be persisted across HTTP requests in order to clean those up and prevent application exploits.

Signoff
Chris

Sent from my Android phone.

On Aug 5, 2010 11:42 AM, "Francisco Sant&apos;anna" <francisco.santanna@gmail.com> wrote:

Hello list,

Following the release of LuaGravity, I have just released Reactive Server Pages.

Reactive Server Pages (RSP) bring some concepts of reactive languages to the realm of server-side web development.
RSP rearrange the way web applications are developed.
A web application conceptually becomes a single file that executes from its first to its last line.
The programmer can use structured programming with loops and recursive calls.
RSP are based on LuaGravity, which extends the Lua language with reactive data and control primitives.

Any feedback is welcome.

Homepage: http://www.lua.inf.puc-rio.br/~francisco/rsp/

Git Hub: http://github.com/fsantanna/luarsp

Thanks,
--
Francisco Sant'Anna
http://www.lua.inf.puc-rio.br/~francisco/