News for hackers. Stuff that matters.

A comment on Don’t try to sanitize input – escape output. Parent comment

Re:Don’t try to sanitize input – escape output by Scarblac on Thursday February 27, 2020 @03:04AM (#22431531)
You can't sanitize for output at input time, as the sanitization that needs to be applied is different for HTML, JS and JSON. You don't know that at input time.
[ Parent | on HN ]

There are no comments on this comment yet.