3 ms·
What are the problems with using inheritance to handle this? class urlencoded extends String; class xsssanitized extends String; then secure functions ca
by archgoon 8y ago
What are the problems with using inheritance to handle this?
class urlencoded extends String;
class xsssanitized extends String;
then secure functions can be explicit about what type they need.
void embedInPage(xssssanitized xssString);
- tptacek 8y agoMost modern frameworks, in all the mainstream languages, already have this feature, and it's usually the default. You still get XSS because you still have to override the filter to do custom HTML, but it helps a lot.
- archgoon 8y agoRight; I'm trying to understand the difference between this and the "units of measure" approach the grandparent was referencing. (To be clear, your latter point is referring to things like 'dangerouslySetInnerHTML' in react?) https://reactjs.org/docs/dom-elements.html#dangerouslysetinnerhtml https://reactjs.org/docs/dom-elements.html#dangerouslysetinn...