> I'd replace the author's advice with "carefully specify the semantics of your sources and sinks", I think that's the abstraction, but the author is presentin

> I'd replace the author's advice with "carefully specify the semantics of your sources and sinks", I think that's the abstraction, but the author is presenting it in a way that requires repeating frequently simply because new programmers arrive ready to do damage every day, and the two forms of input sanitization are a great intro into how the Real World (tm) conspires against you.