Skip to content Skip to sidebar Skip to footer
Showing posts with the label Xss

Using Html Purifier On A Site With Only Plain Text Input

I would appreciate an answer to settle a disagreement between me and some co-workers. We have a typ… Read more Using Html Purifier On A Site With Only Plain Text Input

Using Jquery To Disable Css Inheritance

Is there a way to use jQuery (or generic javascript) to disable CSS inheritance on a block level? F… Read more Using Jquery To Disable Css Inheritance

Using Html Purifier On A Site With Only Plain Text Input

I would appreciate an answer to settle a disagreement between me and some co-workers. We have a typ… Read more Using Html Purifier On A Site With Only Plain Text Input

Is It Better To Escape/encode The User Input Before Storing It To Database Or To Store It As It Is In Database And Escape It While Retrieving?

I am using htmlspecialchars() function to prevent XSS attacks. I have doubt regarding what is the b… Read more Is It Better To Escape/encode The User Input Before Storing It To Database Or To Store It As It Is In Database And Escape It While Retrieving?

Some Chars Encoded During Post While Others Are Not

TL;DR CodeIgniters' Security Class directly manipulates your Globals such as $_POST and it find… Read more Some Chars Encoded During Post While Others Are Not

Escape User-generated Content - What Does That Mean?

I am starting to use the Share button from Google. I am actually using the Share link, and at some … Read more Escape User-generated Content - What Does That Mean?

Html: Should I Encode Greater Than Or Not? ( > > )

When encoding possibly unsafe data, is there a reason to encode >? It validates either way. The… Read more Html: Should I Encode Greater Than Or Not? ( > > )

Sanitize All Scripts From Html String

The HTML5 clipboard is awesome, but I am looking for a way to make it safe. The user is pasting tex… Read more Sanitize All Scripts From Html String