Reputation
Top tag
Next privilege 125 Rep.
Vote down
Badges
2
Newest
 Student
Impact
~144 people reached

  • 0 posts edited
  • 0 helpful flags
  • 0 votes cast
Sep
19
comment How can I migrate from filter-on-output to filter-on-input?
Maybe I expressed this poorly: We ARE USING filter on output, and we are totally riddled with XSS opportunities. Programmers are human, and f-o-o code doesn't "look wrong" if you forget to escape sometimes. So how would you take a 1MM line project that is failing at f-o-o, and repair it?
Sep
19
comment How can I migrate from filter-on-output to filter-on-input?
Lets treat SQL injection as a separate problem, we're using parameterized queries for that.
Sep
18
awarded  Student
Sep
18
asked How can I migrate from filter-on-output to filter-on-input?
Jan
18
awarded  Autobiographer