2 ms·
Depends on what kind of software do you write. When dealing with anything near banking and human life and anything regulated really, I strongly suggest heavily
by hamilyon2 6y ago
Depends on what kind of software do you write.
When dealing with anything near banking and human life and anything regulated really, I strongly suggest heavily sanitizing all of inputs. No control characters, no invalid utf-8, no weird whitespace and white list characters you want to allow. Actual list is domain-specific, of course. Limiting input field to reasonable 20 characters will help defence in depth too.
- shakna 6y agoAnd that's how you end up with a bank unable to handle the existence of certain people because their legal names exceed character limits, contain unexpected characters, or surprise the programmer in other ways. The legal name must be an exact representation, and appear identically. Sanitising it will break things.