[go: up one dir, main page]

Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

You can't sanitize for output at input time, as the sanitization that needs to be applied is different for HTML, JS and JSON. You don't know that at input time.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: