Timeline for What is the logic behind filtering/sanitizing input?
Current License: CC BY-SA 3.0
3 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jul 19, 2012 at 14:02 | comment | added | bwalk2895 | If I had to venture a guess it is probably because they want something like that locked down by default, to prevent less experienced developers from causing huge security problems. I think back to the developer I was at the very start of my career and chances are I would have made a mistake like that. Framework makers have to sometimes write for the lowest common denominator, which causes some headaches for the more experienced developers. | |
| Jul 19, 2012 at 8:31 | comment | added | lortabac | I agree that it is better to buy a hammer rather than building one. But why are some famous hammers made in a different way? Why do they apply filters at input level instead of providing, for example, a 'safe_echo()' function? | |
| Jul 18, 2012 at 16:41 | history | answered | bwalk2895 | CC BY-SA 3.0 |