News for hackers. Stuff that matters.

A comment on UK Company named "><SCRIPT SRC=HTTPS://MJT.XSS.HT> LTD" forced to change it. Parent comment

Re:UK Company named "><SCRIPT SRC=HTTPS://MJT.XSS.HT> LTD" f... by ctenb on Saturday October 26, 2024 @03:14AM (#41953131)
I'm confused why everybody keeps talking about sanitization when all you have to do is escape a string properly whenever you inject it verbatim into a language, be it HTML or SQL or whatever.
[ Parent | on HN ]
Re:UK Company named "><SCRIPT SRC=HTTPS://MJT.XSS.HT> LTD" f... by fisf on Wednesday October 30, 2024 @01:11PM (#41997660)
Because they have not understood the core issue. It's impossible to store / sanitize data correctly, when this is absolutely context / output dependent.
[ Parent | on HN ]