3 ms·
well, this guid says that you must sanitize user input, but at input time, you may not know where it will come out. So, the solution proposed by this guide is t
by geal 16y ago
well, this guid says that you must sanitize user input, but at input time, you may not know where it will come out. So, the solution proposed by this guide is to escape the output. It is another layer of defense: you don't know if you have properly verified the input, but everything you will send to the output will be clean.
- keefe 16y agoto me it seems input is anything coming from the user to the database. I was thinking just like, <> -> < > but maybe this is naive or sometimes you require proper html input