Hacker News new | ask | show | jobs
by AlexCoventry 3167 days ago
> Not trusting user input is a good start, but the client shouldn't be trusted, either.

That's in there:

"Validation must occur on the receiving side of communications. Validation on the sending side is a user experience decision."