It looks like the ex-DDG employee got the details wrong, and read the slides backwards.

  • 0xD@infosec.pub
    link
    fedilink
    arrow-up
    1
    arrow-down
    1
    ·
    1 year ago

    Could have done it with proper encoding, don’t need to remove it lol o.O

    • MotoAsh@lemmy.world
      link
      fedilink
      arrow-up
      1
      ·
      1 year ago

      Allowing tainted data in to the dataset means every single client has to do every single spot of content rendering correctly or else be vulnerable to easy hacking. Keeping it out of the dataset means not all clients have to be perfect for Lemmy to be a secure place.