the.com/sanitization
Scrubbing input until it's too boring to hack you.
means The process of cleaning or stripping data so that dangerous or unwanted content (code, scripts, bad characters) can't slip through and cause harm.
from From 'sanitize,' built on Latin 'sanitas' meaning health or soundness — the same root behind 'sanitary' and 'sane.' The word moved from literal cleanliness (sanitizing a hospital ward) into figurative cleanliness over the 20th century, used for making records, language, or reports free of anything harmful or embarrassing. Computing borrowed that sense directly: input sanitization scrubs user data the way disinfectant scrubs a surface, removing the germs — in this case, malicious code — before they can infect the system.
- not validation
- validation rejects, sanitization cleans and keeps
- classic failure
- little bobby tables; drop table students;
- order matters
- sanitize after validating, never as a substitute
- context dependent
- safe for html can still break sql