On: Don’t try to sanitize input, escape output (2020)

[sameoldtune]

It’s a trade off for sure. But if you know at the time of collection all the ways in which your data is going to be used in the future, you work at a more well-run organization than me!

[TheChaplain → sameoldtune]

Obviously one thing does not exclude the other, but the more processed data is before, the less has to be done later for every page retrieval.

It surprises me that this seem unfamiliar these days?

[kolinko → TheChaplain]

That is true only for simple systems that don't change often and that have a single view of the data.

For most real world use cases your approach is break even at best, and often way worse.

[42lux → kolinko]

You mean it's not suitable for the deploy every hour crowd it has nothing to do with complexity.