News for hackers. Stuff that matters.
Re:UK Company named "><SCRIPT SRC=HTTPS://MJT.XSS.HT> LTD" f... by hnfong on Saturday October 26, 2024 @04:48AM (#41953516)
You probably want to say "correctly handle arbitrary input" than "sanitize" inputs.

If everybody sanitizes their inputs (in undefined ways) then companies like the one mentioned would be randomly blocked from administrative processes.

This is not what we (as a society) want.

If Bobby Tables isn't a valid name the legislation should make it invalid, instead of rubber stamping it at the government registry and let poor Bobby get random errors when making requests to various public bodies. ("Sorry, our school does not admit persons with semicolons in their names.")

Re:UK Company named "><SCRIPT SRC=HTTPS://MJT.XSS.HT> LTD" f... by robertlagrant on Saturday October 26, 2024 @12:24PM (#41955755)
Sanitising inputs would mean Bobby Tables would be able to use their name just fine.