New posts in xss

htmlspecialchars vs htmlentities when concerned with XSS

Sanitising user input using Python

When is it best to sanitize user input?

xss sql-injection user-input sanitization

Sanitizing user input before adding it to the DOM in Javascript

javascript xss escaping

What is the general concept behind XSS?

xss spam-prevention

XSS Vulnerability found in RowCommand function with e.CommandArgument

.net xss checkmarx antixsslibrary

How to access plain text content retrieved via <script type="text/plain" src=...> in JavaScript?

javascript text xss

Cross-site XMLHttpRequest

javascript ajax xmlhttprequest xss

How can I properly escape HTML form input default values in PHP?

php html forms xss

Preventing XSS in Node.js / server side javascript

xss node.js serverside-javascript

CodeIgniter - why use xss_clean

php html security codeigniter xss

How does httpOnly prevent from malicious package to steal the content in it?

javascript cookies xss cookie-httponly

How do you configure HttpOnly cookies in tomcat / java webapps?

java security cookies xss httponly

How do you set up use HttpOnly cookies in PHP

php security cookies xss httponly

How to pass parameters to a Script tag?

javascript parameters widget xss script-tag

Best way to block XSS injection having decode and getParameter

java security xss decode getparameter

How do you use window.postMessage across domains?

javascript html google-chrome xss

Do htmlspecialchars and mysql_real_escape_string keep my PHP code safe from injection?

php security xss sql-injection

WARNING: sanitizing unsafe style value url

typescript angular xss

What is cross site scripting?