Thread

1. hahn-kev · 1790479117 · focus · HN ↗

   It seems wild to me that Twitch doesn't sanitize the messages on their backend. I'm sure that they sanitize them on their own UI. But considering how many people also consume messages via their API, they should also sanitize for them, defense in depth and all.

   1. Rohansi · 1790479587 · focus · HN ↗

      How can you sanitize it in the backend? Do you just not allow sending messages with HTML tags in them?

      1. hahn-kev · 1790480586 · focus · HN ↗

         That, or no script tags, but that is quite hard as I understand.

Unofficial Hacker News client; not affiliated with Y Combinator.