Re:PayPal phishing scam uses invoices sent via PayPal
by SoftTalker on Thursday August 18, 2022 @02:10PM
(#32512997)
Never trust user input. If a user input value will be used on a page or email or other output, it will be abused once this is discovered. You must sanity check.
Edit: this was already pointed out downthread. Missed it before I posted.
Re:PayPal phishing scam uses invoices sent via PayPal
by dylan604 on Thursday August 18, 2022 @06:20PM
(#32515547)
The fact that in 2022 user input sanitation is still such a low hanging fruit for attackers shows that you cannot preach this loud enough or often enough.
Edit: this was already pointed out downthread. Missed it before I posted.