in reply to Re^3: Any security holes?
in thread Any security holes?

Granted, I knew "name" was a bad example.

Space goes without saying, and I might be ignoring more legal letters.

A good mechanism should always include a backfeed channel for critic and adjustment.

Though I remember having a fight with one of my colleagues who insisted that one of his clients can continue to use emojis in his user name and me having to hardcode an exception into the app ... I never "adjusted" this.

Cheers Rolf
(addicted to the Perl Programming Language :)
Wikisyntax for the Monastery

Replies are listed 'Best First'.
Re^5: Any security holes?
by Your Mother (Archbishop) on Jun 26, 2022 at 19:46 UTC

    I know you know and I always sort of knew too but it wasn’t until I saw this that I really knew. :P Falsehoods Programmers Believe About Names.

    I agree, of course, that whitelisting is drastically better security than blacklisting in the general case.

    Update: hippo beat me to it.