On Thu, Jun 25, 2020 at 03:54:24PM -0700, Kevin J. McCarthy wrote:
yes, doing parsing and quoting in the right layers is important. failure to do so leads to insanity and security holes. but make sure to check *all* consumers, lest you actually (re-)introduce security holes (if the handling of some untrusted data relies on this weird quoting behavior).Is it worth correcting this?