« Moon Landing | Main | You say 'test first', I hear 'test eventually' »

Spellcheckers, prosciutto and cross-site scripting

Curious note on Language Log regarding Artifacts of the spellchecker age. I was reminded a bit of bad merges and twitchy refactorings (such as removing seemingly unused methods still referenced through reflection). I thought the final note was worth a chuckle or two:

One very odd type of substitution started popping up a few years ago among users of Yahoo Mail. If an email in HTML format was sent to a Yahoo address and contained the string eval, it would mysteriously get changed to review when the message was received. So medieval became medireview, retrieval became retrireview, primeval became primreview, and so forth. (In French messages, the word for horse, cheval, would become chreview.) It turned out that eval was one of a number of strings that Yahoo's security filter automatically replaced in order to prevent cross-site scripting attacks.

Post a comment

(If you haven't left a comment here before, you may need to be approved by the site owner before your comment will appear. Until then, it won't appear on the entry. Thanks for waiting.)