Don’t try to sanitize input – escape output

Re:Don’t try to sanitize input – escape output by fwsgonzo on Thursday February 27, 2020 @08:03AM (#22432831)

Yep. I've stopped counting the amount of websites that force me to use weak passwords. It's crazy that this is still a thing in 2020.

I wish the controls on browsers came with a green V that implements best practices (8+ symbols, no filter) so that people who made websites understand that this is what they should conform to. Not their own misconceptions about password security.

[ Parent | on HN ]

Re:Don’t try to sanitize input – escape output by lodovic on Friday February 28, 2020 @06:45AM (#22442123)

I wish websites would stop enforcing a "password policy". An insecure password should be a choice. If you are so sure you cannot secure your site, leave authentication to a third party provider. All this leads to is zillions of user accounts that are used only once.

[ Parent | on HN ]

Re:Don’t try to sanitize input – escape output by hinkley on Friday February 28, 2020 @11:23PM (#22448802)

I’m sorry, your password must be 16 characters or less and contain no white space or punctuation.

[ Parent | on HN ]