minimaxir/big-list-of-naughty-strings

The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data.

937 best points · 468 comments · 12 Hacker News posts · 47,715 GitHub stars · View on GitHub

Hacker News discussions

• Naughty Strings: A list of strings likely to cause issues as user-input data (937 points, 144 comments, by caseysoftware, 2017-01-15)
• Big List of Naughty Strings (780 points, 146 comments, by pmoriarty, 2018-11-16)
• Show HN: Big List of Naughty Strings for testing user-input data (514 points, 79 comments, by minimaxir, 2015-08-10)
• The Big List of Naughty Strings (409 points, 92 comments, by polm23, 2020-05-24)
• The Big List of Naughty Strings (24 points, 4 comments, by shirian, 2026-02-21)
• The Big List of Naughty Strings (22 points, 2 comments, by sys42590, 2023-09-07)
• The Big List of Naughty Strings (6 points, 0 comments, by LinuxBender, 2018-11-09)
• Big List of Naughty Strings (5 points, 0 comments, by tosh, 2018-08-23)
• Big List of Naughty Strings (4 points, 0 comments, by golanggeek, 2018-10-08)
• The Big List of Naughty Strings (4 points, 0 comments, by spiffytech, 2023-06-13)
• The Big List of Naughty Strings (3 points, 0 comments, by graderjs, 2022-03-05)
• Big List of Naughty Strings (2021) (3 points, 1 comments, by l1am0, 2026-02-12)