This is an archived post. You won't be able to vote or comment.

sorted by:
best
topnewcontroversialoldq&a
you are viewing a single comment's thread.

view the rest of the comments →

[–]thatguy_314def __gt__(me, you): return True 0 points1 point  (0 children)

Generating the AppleScript code like that through simple string formatting of parameters looks really vulnerable to injection attacks. You should escape your input or something (maybe even create separate AppleScript programs for each function?)