"Screw input validation, love output normalization." to quote larholm from this page http://www.reddit.com/r/programming/comments/86kgp/xss_cross_site_scriptin

"Screw input validation, love output normalization." to quote larholm from this page http://www.reddit.com/r/programming/comments/86kgp/xss_cross_site_scripting_prevention_cheat_sheet/ http://www.reddit.com/r/programming/comments/86kgp/xss_cross... Input sanitation is not the solution to XSS style problems. The author of the article and the people on this page who support this view are wrong.