News for hackers. Stuff that matters.

A comment on WorldChat.io: Chat with realtime translation. Parent comment

Re:WorldChat.io: Chat with realtime translation by octatone2 on Tuesday May 21, 2013 @02:47PM (#5745855)
Should still be sanitizing user input, there's no reason to be passing the message as an html variable in handlebars {{{message}}} :/

You trust your server-side sanitization that much?

[ Parent | on HN ]
Re:WorldChat.io: Chat with realtime translation by sk00byd00 on Tuesday May 21, 2013 @03:22PM (#5746133)
Do you trust the client side at all?
[ Parent | on HN ]
Re:WorldChat.io: Chat with realtime translation by octatone2 on Tuesday May 21, 2013 @03:37PM (#5746285)
I trust handlebars with all my user inputs.
[ Parent | on HN ]