Love the part where he claims that if your users are authenticated, it's not untrusted input. I mean, surely you trust all of your users to run any code on your server, right?
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments