6 ms·
Base64 encode a string and it's generically sanitized. They're a bit difficult to read with the naked eye though.
by kruhft 13y ago
Base64 encode a string and it's generically sanitized. They're a bit difficult to read with the naked eye though.
- damncabbage 13y agoUnless it's in a URL. (This is why URL-safe Base64 versions exist... Which can then in turn be inappropriate for other places.)
- mikeash 13y agoAnd base64 can use the / character, so it's unsafe for POSIX filenames.
- wglb 13y agoUntil the next element in the pipeline chain decodes it and you can then have injection.