Re:Don’t try to sanitize input, escape output (2020)
by serious_habit on Thursday January 13, 2022 @11:35AM
(#29922753)
Even better- never sanitize your data.
You should only use templating systems which safely handle user data. Don't use innerHTML assignments, don't concatenate user data into SQL queries. Use existing, validated libraries for generating HTML and SQL.
You should only use templating systems which safely handle user data. Don't use innerHTML assignments, don't concatenate user data into SQL queries. Use existing, validated libraries for generating HTML and SQL.