• 391 Posts
  • 1.06K Comments
Joined 3 years ago
cake
Cake day: June 16th, 2023

help-circle







  • From the article:

    Google says it’s removing XSLT to address security vulnerabilities. The underlying library that processes XSLT in Chrome (libxslt) is an aging C/C++ codebase with known memory safety issues. Chrome’s team argues that because only about 0.02% of page loads use XSLT, it’s not worth the maintenance burden.

    It’s debatable whether Google, with all its resources, really needs to do this, especially given that 0.02% of all page loads is still quite a lot. But there are certainly times when it’s better to just delete seldom-used old code from your project to lower the maintenance burden and reduce the surface area for attacks.







  • From the CNN article:

    In Tehran province, strikes have affected 275 pharmaceutical, health and emergency centers, 498 schools and 17 Red Crescent centers, Islamic Republic News Agency (IRNA) said, citing Pir Hossein Kolivand, head of Iran’s Red Crescent society.

    The Al Jazeera link has the same number:

    The damaged structures include 62,000 homes, 281 medical centres, hospitals and pharmacies. Additionally, 498 schools had been damaged, as well as 17 rescue points and 12 rescue vehicles.