Top "Xss" questions

Cross-site scripting (XSS) is a type of computer security vulnerability typically found in web applications that enables malicious attackers to inject client-side script into web pages viewed by other users.

ESAPI XSS prevention for user supplied url property

One of my REST APIs is expecting a property "url" which expects a URL as input from the user. I …

java encoding xss owasp esapi
Using MS Anti XSS library for sanitizing HTML

In the intent of preventing XSS attacks, I am updating a page in which we have a textbox that accepts …

.net asp.net security xss antixsslibrary
Sanitize HTML before storing in the DB or before rendering? (AntiXSS library in ASP.NET)

I have an editor that lets users add HTML that is stored in the database and rendered on a web …

asp.net xss antixsslibrary html-sanitizing
How to use Microsoft AntiXss 4.x?

I want to use the new version of the AntiXss library from Microsoft. I downloaded it from the Nuget package …

c# asp.net-mvc security xss antixsslibrary
Veracode - Improper Neutralization of Script-Related HTML tags in a Web Page (Basic XSS)

I have inherited a legacy application and there is a snippet of code given below. private static void printKeywordCheckboxes(JspWriter …

java xss veracode
HTML sanitizer in ASP.NET MVC that filters dangerous markup, but allows the rest

I know that lot of questions about HTML sanitizers have appeared in SO, but I don't know if they do …

asp.net-mvc asp.net-mvc-3 xss antixsslibrary wpl
How to solve Stored XSS issue reported by Checkmarx

Codebase I am working on has been analyzed by Checkmarx, and it came back with a report containing a "Stored …

c# xss checkmarx
Preventing HTML character entities in locale files from getting munged by Rails3 xss protection

We're building an app, our first using Rails 3, and we're having to build I18n in from the outset. Being …

html ruby-on-rails internationalization ruby-on-rails-3 xss
How Does Google Global Login Work?

Whenever I login to one Google service, I am automatically logged in all their other websites on different domains. What …

login xss global
prevent xss attack via url( PHP)

I am trying to avoid XSS attack via url url :http://example.com/onlineArcNew/html/terms_conditions_1.php/%22ns=%22alert%280…

php xss url-validation