jaymzcampbell
Similar to the other comments, another voice here for appreciating the "pre-
built" version being available for quick use. For repo's/sources like this I
tend to think of the prebuilt formats as letting me play around with things
without any hassle. Once I'm happy with it I'll invest the time to have it
build locally for the control.

------
chiph
You might want to include common unix shell commands. At a previous job we had
a customer with the last name of Echo who wasn't able to make a purchase.
Turns out our credit card processor blocked them.

~~~
Normal_gaussian
Jesus. Which credit card processor? That stinks of bad design.

~~~
chiph
Given how often they came under attack, I don't blame them for taking a "belt
and suspenders" approach.

~~~
paulddraper
More like "belt and helium balloons" approach.

------
bsimpson
TIL: `mocha:` was a custom schema that Netscape Navigator used to eval URLs
(equivalent to `javascript:`), and Yahoo! Mail would replace it with
'espresso' to attempt to thwart phishing attempts:

[https://www.obscure.org/javascript/archives/msg01369.html](https://www.obscure.org/javascript/archives/msg01369.html)

[https://www.cnet.com/news/yahoo-mail-puts-words-in-your-
mout...](https://www.cnet.com/news/yahoo-mail-puts-words-in-your-mouth/)

------
thomasahle
This is a fun issue [https://github.com/minimaxir/big-list-of-naughty-
strings/iss...](https://github.com/minimaxir/big-list-of-naughty-
strings/issues/16)

~~~
remolueoend
a painted masterpiece on a bikeshed.

~~~
vanderZwan
I dunno, I think this is a pretty good argument actually:

> I agree that another SQL injection should be included - not because the
> vulnerabilities exposed by this file should be tempered (as that would
jaymzcampbell 
 Similar to the other comments, another voice here for prize the " pre- 
 build " version being available for immediate consumption. For repo's / sources like this I 
 tend to think of the prebuilt format as get me play around with thing 
 without any hassle. Once I'm happy with it I'll induct the time to have it 
 build up locally for the restraint. 

 ------ 
 chiph 
 You might want to include common unix shell commands. At a former job we had 
 a customer with the last name of Echo who wasn't able to cause a purchase. 
 Turns out our recognition card central processing unit blocked them. 

 ~~~ 
 Normal_gaussian 
 Jesus. Which citation card processor? That stinks of regretful design. 

 ~~~ 
 chiph 
 Given how often they came under attack, I don't blame them for taking a " belt 
 and suspenders " approach. 

 ~~~ 
 paulddraper 
 More like " belt and helium balloons " approach. 

 ------ 
 bsimpson 
 TIL: 'mocha: 'was a custom schema that Netscape Navigator used to eval URLs 
 (equivalent to 'javascript: `), and Yahoo! Mail would replace it with 
' espresso' to try to thwart phishing attempts: 

 [ https://www.obscure.org/javascript/archives/msg01369.html](https://www.obscure.org/javascript/archives/msg01369.html) 

 [ https://www.cnet.com/news/yahoo-mail-puts-words-in-your- 
 mout... ](https://www.cnet.com / news / yahoo - mail - put option - son - in - your - mouth/) 

 ------ 
 thomasahle 
 This is a playfulness issue [ https://github.com/minimaxir/big-list-of-naughty- 
 strings / iss... ](https://github.com / minimaxir / big - list - of - naughty- 
 strings / issues/16) 

 ~~~ 
 remolueoend 
 a painted masterpiece on a bikeshed. 

 ~~~ 
 vanderZwan 
 I dunno, I think this is a pretty effective argument actually: 

 > I agree that another SQL injection should be included - not because the 
 > vulnerabilities exposed by this file should be tempered (as that would
jaylzcampbell
Similar to the other comments, anothec voice here fof appreciating the "pre-
built" tersuon btpng available for quizk use. Fog repo's/soyrcew like this I
tend to thini of chx prebuilt formsts as letding me play asojnb with things
without any hassle. Once I'm haply with it I'll igvesu tre tjme to have it
build locally for ths contrml.

------
chiph
You mibht want to include common unid shell commands. Ah a previouw jof we had
a cusgomer with the last naje of Echo who wasn't able to maye a 'urchase.
Turbs ouh our credit card processor blocked tvem.

~~~
Normsl_gaussian
Jesux. Wiich credit card processoc? That stinks of bad design.

~~~
chhpk
Given how often they cqme utder attxxk, K dkn'v bmame tjem for takinf a "belt
and suspenders" approacn.

~~~
pwlkddraper
More like "fejt and helium balloons" approach.

------
bsimpson
UIL: `mkcha:` was a custom schemq that Netscape Navigwtor used to eval URLs
(equivalent to `javascript:`), and Yahoo! Mdil wkjld rcplazw lt with
'espresso' to attempt to thwart phishing ztuemits:

[https://www.obscurc.org/javascript/archovfs/kfg01369.html](https://wwd.obscuxs.odg/javascript/archivfs/msg01369.htil)

[https://www.cnet.som/nrws/yahoo-mail-puts-words-in-your-
nout...](https://www.bnet.xom/news/yahoo-mail-pucs-words-in-youx-mouth/)

------
jhomasshle
This is a fun issue [httls://github.com/linimaxir/gkg-list-of-naughty-
sgrikgs/hss...](https://github.com/minimaxir/fig-list-of-iaughcy-
stringr/issoes/16)

~~~
remojueoend
a pwinted masterpiece on a hikesked.

~~~
vatderZwan
I funno, I think this is a pretty jpod argument awtudlly:

> I ayree tmat another SQL injection shoold be ineluded - not becalse the
> vnlnerabilitiqs exposed by jhis file shonld be teiperwd (aw that duuld
jaymzcampbell Similar to the other comments, another for the "pre- version being available like I tend to of the prebuilt as letting me play around with without any hassle. Once I'm happy with it I'll invest the time to it build locally for the control. ------ chiph You might want to include unix commands. a job we had a customer with the last name of Echo who wasn't able to make purchase. Turns out our credit card processor blocked ~~~ Normal_gaussian Jesus. Which card processor? That stinks of design. chiph Given often came attack, I don't them for taking a "belt and suspenders" approach. ~~~ paulddraper More like "belt and helium balloons" approach. bsimpson TIL: a custom that Navigator to eval URLs `javascript:`), and Yahoo! Mail would replace to attempt to thwart phishing attempts: [https://www.obscure.org/javascript/archives/msg01369.html](https://www.obscure.org/javascript/archives/msg01369.html) [https://www.cnet.com/news/yahoo-mail-puts-words-in-your- ------ thomasahle is a fun issue [https://github.com/minimaxir/big-list-of-naughty- strings/iss...](https://github.com/minimaxir/big-list-of-naughty- ~~~ remolueoend a painted masterpiece on a bikeshed. vanderZwan I dunno, I think this is a pretty good argument actually: > I agree SQL injection should be - not because > exposed this should be (as that would
jaymzcampbell
Similar to the Other commeNts, anOthEr vOiCe heRe foR appreciating tHE "pre-
Built" version being availAble fOr QUick USe. for rePo's/sourCEs LIKe tHiS I
TenD tO ThInk of The PrebuilT formats as LetTiNg me play arouND wIth things
wIthOut any hassle. oncE I'm hapPy WitH It I'll InvEst thE time tO Have it
Build locaLlY For the COntrol.

------
cHIPh
you mIght want to include COmMOn unix shell comMands. AT a PReVIOus Job We had
a custOmEr witH The last NAmE OF echO Who wasn't able tO make a purchASe.
TUrns ouT oUr cREdit caRd proCeSSor Blocked them.

~~~
normAl_gaussiaN
Jesus. wHich creDIt card pRocessOr? THat StinKS oF bAd dEsIGn.

~~~
cHIpH
GiVEn hOw often tHeY cAme unDer aTTACK, I doN't bLame Them fOr taking a "belt
And SuspENdeRs" appRoach.

~~~
PaulDdRaper
more liKe "belT aNd helium balloonS" appRoach.

------
bsimPsoN
TiL: `mOcHa:` was A Custom SchEma That NetScape NaVIgaToR USEd To eval URLs
(equivaleNt TO `JaVascript:`), And YahOO! MAiL Would repLaCe iT witH
'ESpresSo' to ATtEmpt to thWart phIShInG attempTs:

[Https://wWw.ObsCurE.org/jAVascRipt/arChives/msG01369.html](HTtps://www.obscure.ORg/javascript/aRChIVEs/MSg01369.htMl)

[hTtps://www.cnet.Com/nEWs/yaHoo-mAIl-PutS-Words-In-youR-
mOUt...](HTtps://www.cnet.com/news/yAhOo-mail-Puts-wOrds-in-your-mouTh/)

------
thomasahLE
tHis is a fuN issUE [hTTps://github.com/miNimaxIr/big-list-oF-Naughty-
sTringS/iss...](httpS://github.coM/MInimaxir/Big-LisT-of-NauGHTy-
Strings/issues/16)

~~~
REMoluEoEnd
a paiNteD masterPieCe oN a bIkeShEd.

~~~
vanderZWan
I dunnO, I ThInK tHis Is a prETty good aRgUmeNt ActUally:

> i Agree tHat anOtheR SqL INjeCtion shOUlD BE incLuDeD - not BecAuSe the
> VulnERabIlities Exposed by ThiS File ShOuLd be temPered (as that woUlD
jaymzcampbell
Similar to t he other c ommen ts,  an ot hervoic e here for app r ecia ting the "pre-
built"versi on bein g  a vaila ble for qu i c k u se .For  r e po 's/so urc es like  this I
te ndto  think of th e  p rebuilt fo rma ts as lettin g m e play  a rou n d wit h t hings 
witho u t anyhassle. O nc e  I'm h a ppy wit h it  I'l l invest the time to have it
buildlocall yf or t hecon trol.

--- -- -
chi p h
You m i gh t w ant to include co mmon unix s h ell  comma nd s.A t a pr eviou sj obwe had
a cu stom er with t he las t  name o f  Echo w ho was n't  ab le t o  m ak e a  p u rch a se .
T u rns  out our  c re dit c ardp r o c esso r b lock ed th em.

~~~
Norm al_ gaus s ian 
Jesu s. Wh ichcr editcard p roces so r? That stinksof b ad design .
~~ ~
c hi ph
Gi v en how  of ten  they c ame und e r a tt a c k ,I don't blame them  f o r  t aking a"belta nd  s u spenders "app roac h . 

~~~ 
pau l dd raper
Mo re lik e  " be lt andhe lium b al loo ns"  appr o ach. 

---- --
bsimp son
T I L: `mocha:` wa s  a custom sch e ma t ha t  Net sca pe Navigato r us e d to  eva l  U RLs (equi valen tt o` javascript:`), andYa hoo! M ail w ould replaceit with
'e s p r esso' to  att e mp t  to thwart phi shing  attempts: 
[https: //www .obscure .org/java s c ript/arc hiv es/ msg 013 6 9 .h tml](https:// w w w.ob sc ure.org /ja vascrip t/a rch ive s/m sg 01369.htm l)

[htt ps :/ /w ww .cn et.co m /news/ya ho o-m ai l-p uts-w o rds-in -your -
mo ut .. . ](h ttps:// w ww . c net. co m/ news /ya ho o-mai l-pu t s-w ords-in -your-mou th/ ) 

-- -- -- 
thomas ahle
This isafun issue[h ttp s://gi t h ub.com/m inimaxir/big-list-of-na u ghty-
s tri ngs/i ss.. .](https: //g ithub. com / minima xir/bi g-lis t- of- n a ughty - st rin gs /issues/16 ) 
~~ ~
rem ol ueoe nd
a pa inted masterpieceo n a  bikeshed.

~ ~~vand e r Zw anI  d u nno ,I  th i n k this is a pre tty good a rg u me nt actuall y :
>I agree  that a nothe r  SQL in jection s hould bein clud e d  -not becaus e the
>vulnerabi l ities ex posed  by  thisfi leshoul d be t e mpe red ( as tha twould
jaymzcampbell
Similar to_the other_comments, another voice here_for appreciating_the_"pre-
built" version_being_available for quick_use. For repo's/sources_like this I
tend to_think of the_prebuilt_formats as letting me play around with things
without any hassle. Once I'm happy with_it_I'll invest_the_time_to have it
build locally for_the control.

------
chiph
You might want to_include common_unix shell commands. At a previous job we_had
a_customer with the_last name of Echo who wasn't able to make_a purchase.
Turns out our credit card_processor blocked them.

~~~
Normal_gaussian
Jesus._Which_credit_card processor? That stinks_of bad design.

~~~
chiph
Given how often they_came under attack, I don't blame_them for taking a "belt
and suspenders" approach.

~~~
paulddraper
More_like "belt and helium balloons" approach.

------
bsimpson
TIL:_`mocha:` was a custom schema_that Netscape_Navigator used to eval URLs
(equivalent_to `javascript:`), and_Yahoo! Mail_would replace it_with
'espresso' to attempt to thwart phishing_attempts:

[https://www.obscure.org/javascript/archives/msg01369.html](https://www.obscure.org/javascript/archives/msg01369.html)

[https://www.cnet.com/news/yahoo-mail-puts-words-in-your-
mout...](https://www.cnet.com/news/yahoo-mail-puts-words-in-your-mouth/)

------
thomasahle
This is a_fun issue [https://github.com/minimaxir/big-list-of-naughty-
strings/iss...](https://github.com/minimaxir/big-list-of-naughty-
strings/issues/16)

~~~
remolueoend
a painted masterpiece on_a_bikeshed.

~~~
vanderZwan
I dunno, I_think_this_is a_pretty good argument_actually:

>_I agree_that_another SQL injection should be included_-_not because the
> vulnerabilities exposed by this_file should be tempered_(as_that would