Hacker News new | ask | show | jobs
by trilila 2523 days ago
Normally, it would not be the input to be sanitised, but rather the output properly formatted. It's easier to make sure that ANY type of input is shown properly, as opposed to eliminating SOME of the known issues.