3 ms·
I wrote a very similar piece six or seven years ago. People responded here that I was just making sematic arguments or otherwise fell over themselves to ignore
by billpg 7y ago
I wrote a very similar piece six or seven years ago. People responded here that I was just making sematic arguments or otherwise fell over themselves to ignore the point I was trying to make.
It is good to see from the responses here that we've learnt absolutely nothing.
Shameless plug: https://blog.hackensplat.com/2013/09/never-sanitize-your-inputs.html https://blog.hackensplat.com/2013/09/never-sanitize-your-inp...
- palant 7y agoI've been saying the same for at least a decade, e.g. in https://palant.de/2016/03/02/why-you-should-go-with-secure-by-default-for-your-web-application/ https://palant.de/2016/03/02/why-you-should-go-with-secure-b.... It's ridiculous that somebody still has to explain it.