Top "Xss" questions

Cross-site scripting (XSS) is a type of computer security vulnerability typically found in web applications that enables malicious attackers to inject client-side script into web pages viewed by other users.

Why this error in dev console of chrome when using x-xss-protection?

How to fix this error in console? Error parsing header X-XSS-Protection: 1; mode=block, 1; mode=block:expected semicolon at character position 14. …

security header xss
XSS attack to bypass htmlspecialchars() function in value attribute

Let's say we have this form, and the possible part for a user to inject malicious code is this below ... &…

php xss security
Will HTML Encoding prevent all kinds of XSS attacks?

I am not concerned about other kinds of attacks. Just want to know whether HTML Encode can prevent all kinds …

security xss html-encode
A PHP function to prevent SQL Injections and XSS

I am tring to make my PHP as secure as possible, and the two main things I am trying to …

php mysql xss sql-injection
How to sanitize HTML code in Java to prevent XSS attacks?

I'm looking for class/util etc. to sanitize HTML code i.e. remove dangerous tags, attributes and values to avoid …

java html sanitization xss
Cross Site Scripting in CSS Stylesheets

Is it possible to use cross site scripting in a CSS stylesheet? For example a reference stylesheet contains malicious code, …

css xss
Best way to handle security and avoid XSS with user entered URLs

We have a high security application and we want to allow users to enter URLs that other users will see. …

security url xss html-sanitizing
angularjs + cross-site scripting preventing

Is Angularjs takes care of XSS attack. I have read that ng-bind takes care. But When i try to do …

angularjs xss cross-site
Access to restricted URI denied code: 1012

How do you get around this Ajax cross site scripting problem on FireFox 3?

javascript jquery ajax xss
What does it mean when they say React is XSS protected?

I read this on the React tutorial. What does this mean? React is safe. We are not generating HTML strings …

reactjs security xss