Skip to content Skip to sidebar Skip to footer
Showing posts with the label Xss

Escape User-generated Content - What Does That Mean?

I am starting to use the Share button from Google. I am actually using the Share link, and at some … Read more Escape User-generated Content - What Does That Mean?

Creating A Full Screen Iframe

I'm currently looking into XSS attacks, with the aim of using them in client demonstrations (I&… Read more Creating A Full Screen Iframe

Using Jquery To Disable Css Inheritance

Is there a way to use jQuery (or generic javascript) to disable CSS inheritance on a block level? F… Read more Using Jquery To Disable Css Inheritance

Making User-made Html Templates Safe

I want to allow users to create tiny templates that I then render in Django with a predefined conte… Read more Making User-made Html Templates Safe

Sanitize Html5 With Php (prevent Xss)

I'm building WYSIWYG editor with HTML5 and Javascript. I'll allow users post pure HTML via … Read more Sanitize Html5 With Php (prevent Xss)

Why Can't We Have Some Antixss Literal Html Tag

Nowadays I am learning about web security, XSS, etc. As XSS basically targets a client-agent (web b… Read more Why Can't We Have Some Antixss Literal Html Tag

Sanitize All Scripts From Html String

The HTML5 clipboard is awesome, but I am looking for a way to make it safe. The user is pasting tex… Read more Sanitize All Scripts From Html String

Html: Should I Encode Greater Than Or Not? ( > > )

When encoding possibly unsafe data, is there a reason to encode >? It validates either way. The… Read more Html: Should I Encode Greater Than Or Not? ( > > )