Hacker GitHub

← All repos

minimaxir/big-list-of-naughty-strings

View on GitHub ↗ ★ 47,720 Python

The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data.

62 mentions on Hacker News by 58 people: 12 stories, 50 comments · first 2015-08-10 · latest 2026-02-21

Mentions per year 62 mentions · busiest year 2017 (13)
20082026
  1. This is a fair concern. Added a comment to the disclaimer: https://github.com/minimaxir/big-list-of-naughty-strings/com...
  2. This is a fun issue https://github.com/minimaxir/big-list-of-naughty-strings/iss...
  3. ▲ 937
    Naughty Strings: A list of strings likely to cause issues as user-input data
    story by caseysoftware · 2017-01-15 · 144 comments
  4. https://github.com/minimaxir/big-list-of-naughty-strings
  5. …presented. (See commit log, there were no commits proximate prior to the Feb 9 date of the threads: https://github.com/minimaxir/big-list-of-naughty-strings/com... ) The February /r/webdev thread in question:…
  6. As someone who owns a repository with 11,529 stars ( https://github.com/minimaxir/big-list-of-naughty-strings ), I notice a few problems with the logic presented. I happen to have a scraper handy for tracking stars over time, and profiling…
  7. This is pretty clever. I think you should add this to the big list of naugthy strings https://github.com/minimaxir/big-list-of-naughty-strings
    comment by richerlariviere · 2016-04-15 · in Microsoft Edge XSS Filter Bypass
  8. Not to be confused with the big list of naughty strings... https://github.com/minimaxir/big-list-of-naughty-strings
  9. …"Big List of Naughty Strings" test[1], as far as I can tell: https://www.pastery.net/fnfpmw/ [1] https://github.com/minimaxir/big-list-of-naughty-strings
  10. …escapes could be used for nefarious purposes. [0] https://news.ycombinator.com/item?id=10035008 [1] https://github.com/minimaxir/big-list-of-naughty-strings/blo...
    comment by im3w1l · 2015-08-14 · in Blinking Commits
  11. …a PR [0] that also includes Spamassassin's GTUBE [1] which is designed to do a similar thing. [0] https://github.com/minimaxir/big-list-of-naughty-strings/pul... [1] http://spamassassin.apache.org/gtube/
  12. ▲ 514
    Show HN: Big List of Naughty Strings for testing user-input data
    story by minimaxir · 2015-08-10 · 79 comments