Ben Hoyt personal blog
Don’t try to sanitize input – escape output
Why you should escape output correctly, but generally not sanitize user input.
- Points
- 297
- HN comments
- 487
- Submissions
- 3
- Cited by
- 4 commenters
Software EngineeringSecurity & Privacy2020
On Hacker News
| Submitted | Title on HN | Points | Comments |
|---|---|---|---|
| Feb 27, 2020 | Don’t try to sanitize input – escape output by benhoyt | 297 | 280 |
| Jan 13, 2022 | Don’t try to sanitize input, escape output (2020) by maple3142 | 128 | 128 |
| Jul 10, 2024 | Don’t try to sanitize input, escape output (2020) by benhoyt | 68 | 79 |
Cited in comments
Linked from 5 Hacker News comments by 4 different people, from Sep 2020 to Mar 2025.
Most recent:
