3 ms·
I don't find this a good solution. A much better solution is to generate a list of form inputs that are present on a page, then when the form is submitted, chec
by pdufour 15y ago
I don't find this a good solution. A much better solution is to generate a list of form inputs that are present on a page, then when the form is submitted, check if any of the form inputs were changed / any were added.
- obtu 15y agoAgreed, whitelisting attributes regardless of context is much too coarse. Here is a form library that implements what you describe: https://news.ycombinator.com/item?id=3666907 https://news.ycombinator.com/item?id=3666907