3 ms·
"You can't trust user input" means to not fudge with user data in the first place! If your code cares about unicode spaces at the beginning of user input, ther
by revelation 10y ago
"You can't trust user input" means to not fudge with user data in the first place!
If your code cares about unicode spaces at the beginning of user input, there is your problem.
(Also, you missed the reject part)
- maxgee 10y agoHow would you suggest running a user-created-content site without ever fudging/sanitizing the data being posted to the server?