News for hackers. Stuff that matters.
Re:Why escape-on-input is a bad idea (2012) by bestouff on Thursday October 20, 2022 @08:54AM (#33273939)
I find all of this too error-prone. Just use a proper serializer/deserializer for the format you need (e.g. urlencode) and stop approximating this. If you approximate it's a recipe for disaster (read: exploits by script kiddies).

There are no comments on this comment yet.