4 ms·
Looking at the comments here, I think the final doc for this API should have a huge banner saying something like "this API is designed to be used for sanitizing
by jimbobimbo 5y ago
Looking at the comments here, I think the final doc for this API should have a huge banner saying something like "this API is designed to be used for sanitizing output". Otherwise it would be easy for some folks to fall into a trap of using this function for sanitizing inputs on client, which is dangerous practice (never trust what's coming from the client).