3 ms·
And the bigger issue with only sanitizing user inputs without also escaping output is that different escaping methods are required for different output contexts
by glitcher 10y ago
And the bigger issue with only sanitizing user inputs without also escaping output is that different escaping methods are required for different output contexts (HTML content, HTML attributes, URL params, JavaScript variables, etc).