4 ms·
What the hell back-end team relies on their front-end teams to tell them to do input checking? Nothing my front-end people could possibly do would trick me int
by kadoban 2y ago
What the hell back-end team relies on their front-end teams to tell them to do input checking?
Nothing my front-end people could possibly do would trick me into trusting user input.
- Jerrrrrrry 2y agoin 2025? you'd hope not but also cross-system context switches, amateur RegExp, escape character (ab|mis)use, etc. can make "user-input" propagate farther than any one team's boundaries. assertions/test coverage/fuzzing at every boundary so user-input taint analysis can't fail is a requirement for a system that passes user data around more than one time or tech stack.