> You just need to ensure that your data is never interpreted as code. That's sanitization. Many different languages implement this. The old-school method is "

> You just need to ensure that your data is never interpreted as code. That's sanitization. Many different languages implement this. The old-school method is "tainting" data so it can't be used as part of execution without an explicit function call to "untaint" it. Same is used for "secret" data in various programs where you don't want it leaked.