

I’d bet it’s less simple input sanitizing and more 2 mistakes made separately because they don’t know any better.
- The input field converting everything to a string indiscriminately
- Because they did 1, converting everything back to the assumed type
If the front end Dev makes the first mistake, null would be sent in the body as “null”. Then on the backend, somebody might even be binding the variables correctly, but before hand realizing they have to deal with the market and rather than just have a conversation undoes it in their own code.
The post isn’t claiming perfection. It’s claiming production ready. Very different things.
The confusion there is the claim that good/perfect means done. It means ready for use and extensible.
Note: I’m not agreeing/disagreeing with the claim. Just clarifying the point