Re:Why escape-on-input is a bad idea (2012)
by bestouff on Thursday October 20, 2022 @08:54AM
(#33273939)
I find all of this too error-prone.
Just use a proper serializer/deserializer for the format you need (e.g. urlencode) and stop approximating this. If you approximate it's a recipe for disaster (read: exploits by script kiddies).
[ Parent
| on HN ]
There are no comments on this comment yet.