B benhoyt.com Don’t try to sanitize input – escape output 297 points benhoyt 6 years ago 280 comments