• @[email protected]
      link
      fedilink
      English
      3
      edit-2
      1 month ago

      Input sanitization typically handles this as a string that only allows characters supported by the data type specified by the table field in question. While in transit, the strings might be escaped at certain stages, such as via URL encoding. Though this is considered poor practice in many applications, it’s not uncommon to see. The point, however, is to prevent the evaluation of inputs as anything other than their intended type, whether or not reserved characters are present.

      • @[email protected]
        link
        fedilink
        English
        1
        edit-2
        1 month ago

        Yup, then it becomes a front-end problem to deal with wonky input. As a backend dev, this is ideal, just give me data and I’ll store it for ya.

    • @[email protected]
      link
      fedilink
      English
      11 month ago

      Only noobs get hit by this (called SQL injection). That’s why we have leads review code…