Re: Preventing Cross Site Scripting Vulnerbilities

From: Date: Wed, 07 Dec 2005 19:33:07 +0000
Subject: Re: Preventing Cross Site Scripting Vulnerbilities
References: 1  Groups: php.general 
Request: Send a blank email to php-general+get-227084@lists.php.net to get a copy of this message
Michael B Allen wrote:
Can someone recommend a general method for avoiding / eliminating XSS vulnerbilities with PHP?
Yeah, escape output. It's really that simple. Curt Zirzow made a nice post related to this topic yesterday., and here's a simple example: http://phpsecurity.org/code/ch01-4 Hope that helps! Chris -- Chris Shiflett Brain Bulb, The PHP Consultancy http://brainbulb.com/

« previous php.general (#227084) next »