News for hackers. Stuff that matters.
Re:Don’t try to sanitize input – escape output by mikey_p on Thursday February 27, 2020 @01:15PM (#22435989)
Nope, that doesn't work, because you can never know what context your data will be used it so you can't know what's safe or not up front:

See also: http://acko.net/blog/safe-string-theory-for-the-web/

There are no comments on this comment yet.