Posts Tagged 'security'

Common Failures in HTML Escaping

When variables in your web-app can be set remotely, such as by a user input field, it is essential that certain character entities are escaped in order to prevent your site from being vulnerable from cross-site scripting (XSS) injection attacks.

/ No comments

Common Failures in HTML Escaping

When variables in your web-app can be set remotely, such as by a user input field, it is essential that certain character entities are escaped in order to prevent your site from being vulnerable from cross-site scripting (XSS) injection attacks.

/ No comments