News for hackers. Stuff that matters.

A comment on Parse, Don't Validate.

Re:Parse, Don't Validate by mindesc on Monday July 22, 2024 @05:24AM (#41032372)
yeah. use raw datatype url provided by the language and get hacked by some exotic xss you are not aware, because the specs have kitchen and sink included
[ Parent | on HN ]
Re:Parse, Don't Validate by yakshaving_jgt on Monday July 22, 2024 @05:48AM (#41032528)
You can make your own types.
[ Parent | on HN ]