Hacker News Reader

The scariest one is when ' is not allowed.

Must include 1 special character, except for the following: ;`'"-

"Our client-side Javascript should be enough to prevent any SQL injection attempts" /s

My favorite one is when it silently removes those characters but doesn't tell you...