>Sanitizing your inputs has been known about for literally almost half a century that should just be default for developers at this point. Except if you're a "

>Sanitizing your inputs has been known about for literally almost half a century that should just be default for developers at this point. Except if you're a "stupid programmer", in which such defaults are irrelevant to you. In such cases, one can only hope they're relying on tooling that sanitizes as much as possible for them.