Re: Preventing Cross Site Scripting Vulnerbilities
| From: | Roman Ivanov | Date: | Wed, 07 Dec 2005 23:21:16 +0000 |
| Subject: | Re: Preventing Cross Site Scripting Vulnerbilities | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-227094@lists.php.net to get a copy of this message | ||
Michael B Allen wrote:
Can someone recommend a general method for avoiding / eliminating XSS vulnerbilities with PHP?IMO, the best way to avoid XSS is to filter _output_. My script: http://nengine.korsengineering.com/files/src/misc/HtmlFilter.phps