Skip to content Skip to sidebar Skip to footer
Showing posts with the label Xss

Prevent User-entered Scripts From Running In Webpage

In my application, there is a comment box. If someone enters a comment like then an alert appea… Read more Prevent User-entered Scripts From Running In Webpage

Creating A Full Screen Iframe

I'm currently looking into XSS attacks, with the aim of using them in client demonstrations (I&… Read more Creating A Full Screen Iframe

Php Security - Combining Functionality Of Strip_tags(); & Htmlspecialchars();

I want my forum users to be able to insert links and other allowed tags. For example I would like t… Read more Php Security - Combining Functionality Of Strip_tags(); & Htmlspecialchars();

Is It Better To Escape/encode The User Input Before Storing It To Database Or To Store It As It Is In Database And Escape It While Retrieving?

I am using htmlspecialchars() function to prevent XSS attacks. I have doubt regarding what is the b… Read more Is It Better To Escape/encode The User Input Before Storing It To Database Or To Store It As It Is In Database And Escape It While Retrieving?

Using Jquery To Disable Css Inheritance

Is there a way to use jQuery (or generic javascript) to disable CSS inheritance on a block level? F… Read more Using Jquery To Disable Css Inheritance

Html: Should I Encode Greater Than Or Not? ( > > )

When encoding possibly unsafe data, is there a reason to encode >? It validates either way. The… Read more Html: Should I Encode Greater Than Or Not? ( > > )