3 ms·

Explain "easily bypass"?

• FriedrichN 6y ago
  To clarify, I was assuming this was going to be used for input sanitation. If it were used for that a malicious actor could see where a form or XHR call would post to and simply post the raw input to that endpoint, bypassing any sanitation.
  • tantalor 6y ago
    Oh, no it's not meant for that. It's used for sanitizing untrusted outputs for display.