Re:Don’t try to sanitize input – escape output
by zAy0LfpBZLC8mAC on Thursday February 27, 2020 @02:52PM
(#22437093)
I mean, I generally agree, but I think it's already problematic to frame it as "user input that isn't already known to be good". Because "J. O'Brien" is known to be good. The problem is that anyone thinks in the first place that some semantically meaningful input value for some reason is not good.
[ Parent
| on HN ]
There are no comments on this comment yet.