News for hackers. Stuff that matters.

A comment on Don’t try to sanitize input – escape output. Parent comment

Re:Don’t try to sanitize input – escape output by rossdavidh on Thursday February 27, 2020 @03:54PM (#22437730)
"...what it gives you..."

Right there is the flaw. It's not "you", it's "any programmer who ever works with this system, now or any time in the future.

[ Parent | on HN ]
Re:Don’t try to sanitize input – escape output by SahAssar on Thursday February 27, 2020 @05:13PM (#22438523)
Programmers generally agree that user input is untrusted, right?

My point is that should just be extended to the database, and even where it isn't, it sorta already is for attacks.

[ Parent | on HN ]