Hacker News new | ask | show | jobs
by ungamedplayer 704 days ago
The reason you sanitise input is because the data can attack the host and the client.

This post has a narrow view on attackers.

1 comments

It’s really not. The point is that sanitizing output is a better way to protect the host and the client.
Sure, keep writing exploitable code then, have fun!
yes, and the article clearly agrees with you, different destinations of the data have different escaping requirements.