Re: Re: Preventing Cross Site Scripting Vulnerbilities
| From: | Marco Kaiser | Date: | Thu, 08 Dec 2005 13:52:00 +0000 |
| Subject: | Re: Re: Preventing Cross Site Scripting Vulnerbilities | ||
| References: | 1 2 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-227138@lists.php.net to get a copy of this message | ||
Hi,
IMO, the best way to avoid XSS is to filter _output_.
>
> My script:
>
> http://nengine.korsengineering.com/files/src/misc/HtmlFilter.phps
>
uhm,
1st. filter input
2nd escape output
--
Marco Kaiser