News for hackers. Stuff that matters.

A comment on Don’t try to sanitize input – escape output. Parent comment

Re:Don’t try to sanitize input – escape output by TeMPOraL on Thursday February 27, 2020 @09:41AM (#22433620)
That sounds like a broken datastore API. In a properly designed API, you don't need to escape anything, because the API implementation ensures your data doesn't get read as code.
[ Parent | on HN ]

There are no comments on this comment yet.