There is even a list of "you have to do A, B, C, and that's about it" that is missing some major - well known, even! - items. Our "field" of programming is so

There is even a list of "you have to do A, B, C, and that's about it" that is missing some major - well known, even! - items. Our "field" of programming is so weak in its preservation of institutional knowledge, that we have to occasionally fight the recurrence of bad ideas about very basic things, like using string filtering to avoid SQL injection. Yes, this happens, even in "hip" new parts of the field, like the communities around newer languages. (I have a specific example in mind, but I don't want to deal with the resulting war.)