There was a question about handling input in a secure way. OP showed how they do it and asked whether it was secure. e.g.,
function secure_input(input) {
// do stuff to secure the input
// then return secured input
}
Two users commented that it was secure but then someone else put in an answer that demonstrated clearly how to defeat the function, leading to successful arbitrary code execution.
This post from The Overflow suggests that we, as a community, should do more to educate and raise awareness.
I believe I did that when I flagged these two comments, unfortunately they have been declined. If there were answers I would have downvoted them and left a comment.
It's my firm belief that the users who wrote these comments acted in good faith but the truth is that they are are both incorrect and "harmful".
Was I right to flag these comments?
Would it be possible to flag content as needing security review and create a new kind of review queue?