Trust has to start somewhere.
Make it a place you can see.
Validate input at the boundary —
the moment it enters your system.
Once. Hard. In one place.
Past that line, the data is clean
because you made it clean,
and the inside can stop apologizing.
The mess is when you validate
a little bit everywhere,
half-checking the same field
in six different functions,
none of them sure who's responsible.
Draw the border.
Everything crossing it gets checked.
Everything inside it is trusted
because it already was.
A clear edge
is worth more than scattered paranoia.
– Serguey Asael Shinder
Top comments (0)