News for hackers. Stuff that matters.
Re:Why escape-on-input is a bad idea (2012) by spookylukey on Wednesday October 19, 2022 @11:29PM (#33270510)
Just the other day I added a recent example to that page, from https://www.wsj.com/articles/internet-mangles-names-accents-... where it is obvious that databases are storing pre-escaped data.

It's not easy to know if that is because of really old data. But changing this is very hard, so I imagine many systems that adopted it once are stuck with it.

There are no comments on this comment yet.