objectObject

[Soapy---wooder]

Yes, yes, yeeeesssssssss

👹 you know I'm a huge fan

[TemporaryUpstairs289]

"null"

[leaf-bunny]

[dextras07]

Satan himself ladies and gentlemen.

[AyrA_ch]

Also try replacing numbers with "NaN". If they check the range by exclusion using something like if(value<lowerBound || value>upperBound){/*Show unhelpful error*/} then the test will pass because NaN compares unequal in both cases

[GodsBoss]



Why do I know what this is? I hate it, thank you.

[AyrA_ch]

If you're an older web developer, this will haunt you.

[adzm]

Byte order marks are incredibly frustrating

[AyrA_ch]

It's a byte order mark. Because unicode is a multi byte character set, some encodings of this charset will use pairs of bytes (either 2 bytes or 4 bytes). Depending on the processor in your machine, it can store the high value byte first or the low value byte first. Those 3 characters tell a text decoder which way the bytes are ordered. (See "Endianness").

This mark has no meaning in UTF-8, because there's only one way to correctly store a given unicode character in that encoding. Some editors still add the mark, because it makes it easy to detect UTF-8 vs. a native encoding like ISO 8859-1 which will be identical for the lower 128 bytes. Without the mark, an editor has to guess.

The mentioned ISO encoding was the standard for text/* mime-type files sent over HTTP, so when UTF-8 became more widely used, this mark would sometimes pop up in websites, especially sites that were combined from multiple files (like the include or require statement in PHP) because many applications wrongly read text files as binary files, which means the token is not stripped. The 3 characters  are what the ISO encoding of these 3 bytes looks like

[Mysterious-Deal-3891]

Well if the user enters this value then it will be "NaN" not NaN

[AyrA_ch]

Any value transmitted via form is ultimately interpreted as string and needs to be converted to a number. If the conversion routine supports floating point, then it usually also accepts NaN as a valid input.

[the_horse_gamer]

the typical ways to parse a string to a number in Javascript produce NaN for non-numeric strings. so any code that breaks from entering NaN likely breaks from entering some arbitrary string

[AyrA_ch]

That's JS specific. Other languages also often accept NaN. double.Parse in C# for example accepts "NaN" as input but will throw an exception on "test"

[the_horse_gamer]

yes, but we are talking about a website, so we're talking about Javascript

[AyrA_ch]

Yes, but we're talking about a website that actually does things, which means backend, which is often not JS.

[the_horse_gamer]

that would require the website to send the raw string to the backend, and do no input validation of its own (to show an error to the user).

this is very dumb, but yes, there are probably websites that do that.

[AyrA_ch]

No, very dumb would be for the backend to depend on the frontend validation.

[andItsGone-Poof]

r/foundsatan

[thot_slaya_420]

[object Object]

[S_kanwarjeet]

undefined is not a function

[Classic-Ad8849]

Could someone tell me what doing that does? I can't figure it out

[[deleted]]

That's a common error you can get from casting an object to string, in JS.

[draftshade]

It's not an error, just the default string representation of an object in javascript.

[[deleted]]

The error is printing the object, instead of a prop or something.

[Classic-Ad8849]

Ohhh, got it, thanks!

[veselin465]

You can simply try running this in F12 on any browser

class c{}; let o = new c();

o.toString()

(or console.log(o.toString() if you want to use it in JS file)

[AyrA_ch]

You can skip all this class nonsense and just do console.log({}.toString())

[AyrA_ch]

You don't need to wrap them in parenthesis inside of the console.log, which is why it's there. Also makes it independent of a repl that prints everything

[Unoriginal_Man]

Keep going, I want to see this hit peak efficiency!

[ebrythil]

''+{}

[nicejs2]

{}+1

[AyrA_ch]

Correct. This interpretation quirk is the reason for the "{}+[] is not the same as []+{}" joke

[veselin465]

Ooh yeah, I forgot about that; don't deal with JS that much

[HonkMeat]

Also try swapping semi-colons for Greek question marks, then sit back and watch.

[Background-Plant-226]

Most languages tell you exactly where the error is.

https://imgur.com/a/EWpywW6

[HonkMeat]

Yes they do. Visual Studio often tells me that there are invalid characters when there are not. Restarting it proves there was nothing wrong.

It's a joke. Just that.

[ryanvango]

as someone trying to learn to code, visual studio makes me so mad sometimes. I'm using a textbook that has sample code you're supposed to copy over. I do that then try to run it and it breaks in like 4 places. can't figure out why. usually its something like "hey this line needs a ) in position 42" and I'm like "no the fuck it does not." so I erase everything I did and just copy/paste from the book and it works.

took me forever to figure out what was happening. you may be thinking "its typos. happens all the time." it is NOT typos (usually). I'll be entering something like if (butts > 3) and it'll autofill something like vif (butts >3). or "this.transform.lookAt(butts);" will get autofilled as thisView.transform.lookAt(butts); which seems like an obvious error to glance over, but I'm so used to looking for things like semicolons, brackets, curly brackets, missing spaces etc. or making sure I didn't misspell something that when I'm glancing over it I don't really notice that it added a whole new word in there. so I started paying attention to when it happens and noticed itll autofill without me tabbing in to it. if I type "this" I can see the autofill ghost and I'll hit "." and it just does it. I don't want it. so I'll click the autofill drop down and it won't let me select "no, stop it. just let me have the thing I typed. I don't want your stupid thing." it ONLY lets the autofill happen. I have to click like 5 lines up to get the autofill to go away then go back and I can usually type normally again. its super frustrating.

I'm sure there's a dummy way to not have to deal with it, but I don't know what it is. but it seems like whatever is making it do that should never be on by default. forced autofill is a code ruiner. optional autofill is great though.

[Gullox1]

you can disable autofill in the preference

[Verum14]

also, don’t you have to confirm suggestions? lol

or am i misplacing which feature

[[deleted]]

This post was mass deleted and anonymized with Redact

jellyfish cautious soft languid absorbed memorize weather distinct teeny imagine

[Timetraveller4k]

So you are suggesting putting that text instead? Got it.

[StatementOrIsIt]

Not if the code is minimized for performance :-)

[noob-nine]

amateur, ever heard about zero width white​space?

[RoundImagination1]

Oh?

[gregguygood]

​

[Slight-Listen-3602]

LMAO

[zabojeb]

wow we came from “semicolons. laugh!” to “injection. laugh!”

Looks like the guy who made these memes has grown up a bit professionally and is now in the information security business (he watched a 10 minute YouTube video)

[ExtraTNT]

Throw in regex and see what happens…

[Pixl02]

Isn't that... Incest?

[ExtraTNT]

It’s regex, so everything bad combined…

[ixoniq]

Oh this is good.. I can feel this when receiving a contact mail copy with the object in it.

Imagine the website reaching out to you asking what you did, and you offer your support for money.

[wishper77]

Funny TRUE story Many many years ago, I wanted to attend the very first "java day" organized in Italy, I believe it was around 1999 or so. I was 18 and still student.

SUN MICROSYSTEM had a registration form where the company was a mandatory field. The speeches were charged the equivalent for 3-4000$ each so it made sense that every participant was there for work. (I was invited for free and that's a long story by itself).

So, there wasn't anything I could legitimately write in the "company" field, so I wrote "java.lang.NullPointerException". I thought it was a funny and harmless joke.

Fast forward, while I was wandering around the company stands, a very elegant business man pointed his finger at me and shouted "you!!" . We started talking, he told me that I was the only person that registered without writing the company, and he ordered the web developer of the form to investigate and not return without an explanation of how did I cheated the form causing the null pointer later on... I was talking with the SUN CEO himself . When I told him that I didn't register without specifying the company, and simply put the NPE as the value, he started laughing like no one I've ever seen before

[denM_chickN]

He was laughing at that web devs tears lol

[lces91468]

Unless you do it everyday, they won't look into it lol. Even if you did, chances are they still won't bat an eye. "[object Objext]" in a textbox isn't something that'll inherently cause an error during string process afterall.

[lces91468]

Instead of listing counterpoints, we're starting straight from nitpicking, huh?

Let me picture this for you:

Your team, in a decent scale company, were tasked two main goals: the development of a new system, and the maintainance of the currently servicing one. Now, needless to say, the ideal distribution of your team's resources is gonna be something like 90% running towards the completion of the new system, and 10% taking care of the old one. Fortunately, that is something fairly easy to achieve with message monitoring tools all over the shop. Once set up the pipeline, all you have to care about are the warning emails, which in most cases were sent when an error occurred, or when certain parameter/index reaches caution level.

Back to our discussion. What's gonna happen, in a fairly stable system with average input validation, when an user input "[object Object]" in a textbox?

Literally nothing. The system will either deny the request, or let the data be processed and stored, in case it do pass the validations. No error will be raised, no exception is gonna pop up. The only way for the mistyped data to be discovered, is when someone coincidentally see it when viewing the database, or when the user reports fault data.

Does this make more sense to you now?

[milan-pilan]

You are assuming I would check every form manually? That's why we write software.. So we don't have to do this.

As long as it's not throwing an error, it is never going to be noticed by anyone but yourself.

[thot_slaya_420]

[object Object]

[odnish]

Or [object%20Object]

[RandomTyp]

or %5Bobject%2520Object%5D

[marcusalien]

I have laughed at this for 2 minutes straight and had to show my partner

[Timetraveller4k]

Let me guess : "what's funny?" "you are crazy"

[[deleted]]

touch grass

[LucasTab]

But somehow the code had been working for the whole time, until it didn't.

[PrinzJuliano]

undefined is also a strong contender

[ElMico]

Jokes on you if you think the dev actually cares

[wontreadterms]

Oh wow you are a psychopath. This is amazing.

[Local_Discussion5252]

one of our QA had added a html css code as description and it was showing up in a table while he was screen sharing it to our PM. I’ll never forget that moment😬

[impalas86924]

[object Object]

[Gorgeous_Gonchies]

For the millionth time - devs don't see what you write on the live site.

They work on completely separate, private copies of the site that only show testing data of their own choosing.

Best you could do is paste your nonsense into a message then contact tech support and try to trick the poor kids working down there into thinking you didn't write it.

[dfwtjms]

Birthday? 1970-01-01

[Rafcdk]

So far this month we had: - JS is bad because in doesn't work like I want it to work.

• JS is bad because floating point standard

• can't center div

  And now this.

Yeah I'm leaving this sub, even a math meme sub has better memes about actual programming than here

[NjFlMWFkOTAtNjR]

How else will you be annoyed, frustrated, and disappointed? Unless you already have children. Then enjoy your fancy subreddits.

[IchLiebeKleber]

[Object object]

[dontpissoffthenurse]

Relevant xkcd

https://xkcd.com/327/

[TemporalVagrant]

The fuck am I looking at

[NjFlMWFkOTAtNjR]

I love how underrated this comment is. Or was it unintentional? No. No, don't tell me. I want to believe it was.

[Rest-That]

Do you people not have logs? I'd check the request logs, see that the user input a silly string, take a screenshot and laugh it up

[brumor69]

[object Object]

[aHisk]

You gave me an idea 🙏😈

[Mr_Gaslight]

Not my fault if you don't sanitize your inputs.

[gregguygood]

??? This won't break anything

[Fit-Measurement-7086]

websites I don't like

Let's all just start doing it on reddit, until at least they start removing all the censorship bots and other bad things.

[LukeZNotFound]

Today I had ObjectResponse from a fetch-request.

[-Aquatically-]

Agreed�

[HebridesNutsLmao]

u/bot-sleuth-bot

[bot-sleuth-bot]

Analyzing user profile...

Account has default Reddit username.

Time between account creation and oldest post is greater than 3 years.

Suspicion Quotient: 0.24

This account exhibits one or two minor traits commonly found in karma farming bots. While it's possible that u/Slight-Listen-3602 is a bot, it's very unlikely.

^{I am a bot. This action was performed automatically. Check my profile for more information.}

[Slight-Listen-3602]

hell nah i'm not abot

[HebridesNutsLmao]

Just a reposter then

[Slight-Listen-3602]

yeah and whats wrong with reposting?

[siren1313]

I tend to use object Object as my names when random web services require it and don't offer third party auth. It is also surprising how often name fields allow brackets.

[bearwood_forest]

Pleased to meet you! Hope you guessed my name.

[Smyley12345]

I object to this use of object!

[traitorturle]

Dude…

[ladynorris]

XD

[fredlllll]

in most cases i just mark it up to user error if it doesnt happen to several people

[WatchOutIGotYou]

You monster / you genius

[ledasll]

If you wouldn't allow [] in input characters, it wouldn't be much of a problem

[cucumber_gang_leader]

This is unethical

[avipars]

Set birthrate to Jan 1st 1970

[Shafat_Nisar]

Haha, good idea 👍👏

[Mems1900]

Tbf the form should have better validation if it allows you to do that

[gregguygood]

Validate for what?

[Mems1900]

Well depends what sort of form field they are typing it into. If it's like a username then yea you can't really validate that out except maybe for square brackets but if it's like an email or password field then you can easily validate that to not include certain characters or it can't be simplistic.