Don’t try to sanitize input, escape output (2020) | Hacker News