Hacker News Reader

The reason you sanitise input is because the data can attack the host and the client.

This post has a narrow view on attackers.

It’s really not. The point is that sanitizing output is a better way to protect the host and the client.

Sure, keep writing exploitable code then, have fun!

yes, and the article clearly agrees with you, different destinations of the data have different escaping requirements.