3 ms·

Good frameworks can protect against SQL injection and XSS (through default escaping of output variables) but protecting against insecure direct object access is

by simonw 6mo ago

Good frameworks can protect against SQL injection and XSS (through default escaping of output variables) but protecting against insecure direct object access is a lot harder.