2 ms·
The sane way is to escape input. Be 8-bit safe by using hex escapes and if necessary, use specialized Unicode hex collation rules. Every text processing is sup
by AstralStorm 7y ago
The sane way is to escape input. Be 8-bit safe by using hex escapes and if necessary, use specialized Unicode hex collation rules.
Every text processing is supposed to have clear escape rules. Albeit there were bugs where accidental unescaping does happen.
- varelaz 7y agoProblem with escaping that you need to know what you escape for, escaping is needed for almost everywhere (SQL, URL encoding, HTML, JSON, YAML) and double escaping could break the content.