3 ms·
Browsers aren't doing anything differently because the people who write browsers happen to understand the threat model. You can sanitize input fields on the cl
by chmod775 5y ago
Browsers aren't doing anything differently because the people who write browsers happen to understand the threat model.
You can sanitize input fields on the client all you want and an attacker would still send whatever the hell they felt like to the server.
- sgerenser 5y agoTrying to sanitize on the input side reminds me of Cisco’s fix for a vulnerability in their routers that involved disallowing requests with a user agent containing “cURL”.