| ▲ | pwdisswordfishq 4 hours ago | |
Though in this case, it would be: escape, don't sanitize. "Parse, don't validate" applies to taking inputs; this is about generating outputs (like SQL queries or HTML markup). | ||
| ▲ | Synthetic7346 3 hours ago | parent [-] | |
Yes, I believe the term is "output encoding" | ||