Parsers don't have to be complicated

My ZIP isn't your ZIP: Identifying and exploiting semantic gaps between parsers

Dear String-to-Integer Parsers

Unexpected security footguns in Go's parsers