TootSweet, 10 months ago

There is no such things as unsafe text or unsafe characters. Only incorrect and insecure encoding practices. There’s no valid security reason why something like 0 != 1 (or for that matter '); drop table posts; –) should not be allowed as a post title unless the developers are just too lazy or clueless to use parameterized SQL queries and correctly escape the title when including it in an HTML template.