note 75780 deleted from function.htmlentities by danbrown
| From: | danbrown@php.net | Date: | Sun, 17 May 2009 16:54:27 +0000 |
| Subject: | note 75780 deleted from function.htmlentities by danbrown | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-154910@lists.php.net to get a copy of this message | ||
Note Submitter: Justin
----
In response to soapergem at gmail dot com 10-May-2006 02:14 - If any of you are attempting to use
this or anything else to foil XSS attacks, test this or any other function out _first_ before you
put it into a development environment. To test out if you think your code will pass, just visit http://www.gnucitizen.org/xssdb/application.htm
for some potential attacks. After doing this myself it is apparent that just simply using
htmlspecialchars is sufficient.