Article starts from "don't sanitize input" but in the middle :
> If you’re not using Markdown but want to let your users enter HTML directly, you only have the second option – you must filter using a whitelist.
So "don't filter but filter"
> If you’re not using Markdown but want to let your users enter HTML directly, you only have the second option – you must filter using a whitelist.
So "don't filter but filter"
No comments yet.