Craig Francis
banner
craigfrancis.bsky.social
Craig Francis
@craigfrancis.bsky.social
Security, Accessibility, Performance... trying to make the world better… live in Bristol, UK.
Why do I keep seeing the words “Cable Street”?

Seems to be random, maybe I’m noticing it because it’s in one of my favorite books (Night Watch, by Terry Pratchett).

en.wikipedia.org/wiki/Battle_...
September 18, 2025 at 2:10 PM
Could we put all the racists on their own island, so they can make their own country to be “proud” of?
September 8, 2025 at 4:13 AM
Reposted by Craig Francis
Are you safe from injection vulnerabilities?

Even using abstraction layers like Doctrine or parameterised queries mistakes can still happen.

@craigfrancis.bsky.social shows us how mistakes can be made and what can be done to mitigate them.

Buy your ticket here: https://buff.ly/40Ck2WR

#phpuk
January 22, 2025 at 10:00 AM
Reposted by Craig Francis
XSS vulnerabilities keeping you up at night? 😱 Google's new "Commitment to Secure by Design" whitepaper has answers! Safe Coding and web platform improvements are key. Read more (page 7):
static.googleusercontent.com/media/public...
static.googleusercontent.com
November 16, 2024 at 9:31 PM
SQL Injection still exists despite abstractions like ORMs, QueryBuilders, & Parameterised Queries; simply because it’s easy to make mistakes (especially for new developers). Programming languages could find/stop these mistakes by identifying “trusted developer defined strings”:
eiv.dev
Ending Injection Vulnerabilities
How programming languages and libraries can being an end to Injection Vulnerabilities.
eiv.dev
November 29, 2023 at 9:38 AM