116 reputation
2
bio website wadhams.net
location Sunnyvale, CA
age 35
visits member for 1 year, 11 months
seen Dec 11 at 22:01
I'm a fast car enthusiast, read plenty of books, enjoy movies, and collect (but mostly consume) scotch.

Sep
19
comment How can I migrate from filter-on-output to filter-on-input?
Maybe I expressed this poorly: We ARE USING filter on output, and we are totally riddled with XSS opportunities. Programmers are human, and f-o-o code doesn't "look wrong" if you forget to escape sometimes. So how would you take a 1MM line project that is failing at f-o-o, and repair it?
Sep
19
comment How can I migrate from filter-on-output to filter-on-input?
Lets treat SQL injection as a separate problem, we're using parameterized queries for that.
Sep
18
awarded  Student
Sep
18
asked How can I migrate from filter-on-output to filter-on-input?
Jan
18
awarded  Autobiographer