Viewing profile — padraicb

padraicb

HN member

No profile information was provided.

comment
Comment #7124881
1) Agreed. 2) Citation? PHP is extremely popular so it has more insecure code in comparison to Ruby. Also Rails isn't above multiple security vulnerabilities per year so I don't se…

Sun, Jan 26, 2014, 12:26 PM UTC
story
PHP RFC: Consistent Escaping Functionality For Killing XSS
Tue, Sep 18, 2012, 5:23 PM UTC
story
PHP Security, Authorative Knowledge and Combining Forces
Tue, Sep 04, 2012, 3:16 PM UTC
story
PHP Security: Default Vulnerabilities and Security Omissions
Thu, Aug 30, 2012, 5:42 PM UTC
comment
Comment #4179226
Problem with HTML escaping by default - it's not all HTML escaping. Javascript strings need to be JS escaped, sometimes escaped by HTML as a second (or even first) step to complete…

Fri, Jun 29, 2012, 9:34 PM UTC