Update 0x13-V5-Validation-Sanitization-Encoding.md

[jmanico]

work for #1731

[tghosth]

@csfreak92 is that sufficent extra context do you think?

[csfreak92]

It looks good, @tghosth though there's something missing I think. I say that because format string vulnerabilities are kind of like a command injection through these format strings being interpreted as commands. Would sanitization of input be enough? I'm pondering as well if that's enough or not. Welcome for more feedback.

[tghosth]

Sanitization should always be enough I think... It generally means removing special characters so should probably be the most aggressive protection

[csfreak92]

Ah I see, ok then that closes it. I concur with this PR. :)

[jmanico]

Respectfully, sanitation has a history of causing harm and is the last resort. For example if you remove ../ then ….// will bypass. Escaping and/or encoding is always the preferable defense when it comes to injection, expect SQL which is of course querying parameterization. I’m sorry to add feedback late in the process.