Should a parser repair invalid input?
Correcting an input can make a system convenient, but another component may interpret the correction differently. Rejection makes that boundary explicit.
Read on through a shared source
When does an expressive format become an attack surface? →A format can admit computation its designer did not anticipate. That changes what it means to process input supplied by someone else.Where should untrusted input stop? →Compare an instruction embedded in model input with data entering a parser. Both examples ask who gets to decide what is treated as an instruction.
Compare the passages
correcting what they see back to the nearest valid neighborif you haven't recognized it don't goddamn process it