SecurityInnovation/TMContentReview — Issue #21: Application Does Not Rely Only on Client-Side Validation
Author: SergeTruth
Created: 2011-11-07 22:14:24+00:00
State: open

The title is a bit confusing as it sounds like you are advocating the use of client-side validation.

Need to canonicalize data before performing validation to remove filter bypassing encodings.