Html5 Cafe

In my application, there is a comment box. If someone enters a comment like then an alert appea… Read more Prevent User-entered Scripts From Running In Webpage

I need to implement a simple and efficient XSS Filter in C++ for CppCMS. I can't use existing h… Read more Writing Xss Filter For (x)html Based On White List

I have a rich text editor that passes HTML to the server. That HTML is then displayed to other user… Read more Filtering Javascript Out Of Html

I am starting to use the Share button from Google. I am actually using the Share link, and at some … Read more Escape User-generated Content - What Does That Mean?

TL;DR CodeIgniters' Security Class directly manipulates your Globals such as $_POST and it find… Read more Some Chars Encoded During Post While Others Are Not

I am building a blog and currently im finishing the admin panel. Since i will be mostly who will be… Read more Prevent Xss But Allow All Html Tags

I am using htmlspecialchars() function to prevent XSS attacks. I have doubt regarding what is the b… Read more Is It Better To Escape/encode The User Input Before Storing It To Database Or To Store It As It Is In Database And Escape It While Retrieving?

Nowadays I am learning about web security, XSS, etc. As XSS basically targets a client-agent (web b… Read more Why Can't We Have Some Antixss Literal Html Tag