Preventing Cross Site Scripting Vulnerbilities

From: Date: Wed, 07 Dec 2005 19:13:49 +0000
Subject: Preventing Cross Site Scripting Vulnerbilities
Groups: php.general 
Request: Send a blank email to php-general+get-227082@lists.php.net to get a copy of this message
Can someone recommend a general method for avoiding / eliminating XSS vulnerbilities with PHP? Specifically is there a library function for validating fields? If not, can someone recommend a regex that detects HTML tags? Similarly is there a library function for escaping database content for inclusion in HTML pages? Thanks, Mike

« previous php.general (#227082) next »