Go-SCP icon indicating copy to clipboard operation
Go-SCP copied to clipboard

Section "Sanitization" should be under "Output Encoding", not "Input Validation"

Open jorygeerts opened this issue 3 years ago • 1 comments

The section "Sanitization" talks about what needs to be done to safely display user submitted content, which doesn't actually have anything to do with "Input Validation", despite being a part of that chapter.

Having this section in the wrong place can mislead developers and give them a false sense of security ("I don't need to worry about XSS, because I've removed the HTML stuff").

I suggest moving the "Sanitization" section to the "Output Encoding" chapter, probably renaming it to something like "HTML".

jorygeerts avatar Aug 17 '22 14:08 jorygeerts

@jorygeerts happy create a PR fixing this Issue

puneeth072003 avatar Dec 30 '22 12:12 puneeth072003