There's a piece of software that's used by insurance companies for providing online quotes that (used to) contain some pretty egregious SQL injection vulns. Wh

There's a piece of software that's used by insurance companies for providing online quotes that (used to) contain some pretty egregious SQL injection vulns. When this was discovered during the development of an integration, their solution wasn't to fix the disgusting spaghetti of SQL functions causing it, their recommendation was to use Javascript to remove any special characters from html inputs. HEAD DESK