| bio | website | twitter.com/lucaswiman |
|---|---|---|
| location | Mountain View, CA | |
| age | 30 | |
| visits | member for | 9 months |
| seen | 2 days ago | |
| stats | profile views | 1 |
I work on building intelligent web applications to help people find and manage information.
I'm especially interested in information extraction and data mining, but I like working on the whole stack of a feature: from the analytics to the front-end.
|
May 4 |
comment |
Is stripping out < and > characters an effective way of preventing XSS? "if somehow you are placing user input into something inside a <script> tag, there are a whole myriad of things you need to worry about." Really? I haven't worried too much about this: I always encode the string using a JSON encoding library. Something like Python's json.dumps(user_input) should suffice for this, shouldn't it? (Assuming that user_input is a string.) |
|
Jan 24 |
awarded | Teacher |
|
Jan 24 |
answered | If email is insecure, why do we use it for password resets? |
|
Jan 10 |
awarded | Supporter |
|
Aug 9 |
awarded | Autobiographer |