News for hackers. Stuff that matters.

A comment on Password may not contain: select, insert, update, delete, drop. Parent comment

Re:Password may not contain: select, insert, update, delete,... by patrakov on Sunday January 21, 2024 @09:53AM (#39078943)
This relies on a false assumption that the sanitizer is static.
[ Parent | on HN ]
Re:Password may not contain: select, insert, update, delete,... by MadnessASAP on Sunday January 21, 2024 @11:03AM (#39079629)
If we're to continue with this thought experiment in doing the dumb thing. Clearly you would version your sanitizer and store which version you used when saving the password. That way you can ensure the same version is used against future user inputs.
[ Parent | on HN ]