xss-CodePudding

Tags > xss

09-03BlockchainSet-Cookie doesn't set the cookie
09-01databaseWhy this file read got flagged as Cross Site Scripting?
08-31Software engineeringIs it necessary to purify / sanitize the request body for post requests in NodeJS and Express to pre
07-22Software engineeringMoving html around removes controls from the page
06-25Software engineeringCreate javascript variable from php template using <script> tag - PHP/Wordpress
06-21front endResponse.Redirect identified as XSS possible by Fortify
06-09Software designReact escapes already escaped string
05-28NetDisable Access-Control-Allow-Origin in ASP.Net and ASP.Net Core
05-27Software designXSS - how the script injection happens
04-10NetSanitize image content and remove embedded Javascript
04-09MobileIs it safe to use dangerouslySetInnerHTML with hard coded html strings?
03-29NetHow To Add X-XSS-Protection and X-Frame-Option to Response Header in PHP using .htaccess
03-28NetReplace HTML code with code from another page
03-26NetPrevent XSS attacks but still display single quotes for instance
03-25NetPreventing XSS attacks in React and NodeJS
03-25MobileXSS - Does loading external HTML by setting innerHTML on DOM element prevent attack?
03-16Back-endInject and execute JavaScript into an existing DOM
03-03Back-endJavascript array out of bounds functions
03-01OSMigrate spring Form htmlEscape attribute behavior to Thymeleaf
02-14EnterpriseHow to sanitize user input string in nodejs, before injecting it in a template engine or say simple
12-15NetHow to use innerHTML safely?
12-08OSPrevent XSS/Cross site scripting vulnerability - request.getParameter() in JSP
11-24databaseIs CSRF middleware needed if HTTPOnly cookie is used? And should it be session-based?
11-15MobilePHP Security test gives me critical Reflected XSS warning for GetHTMLValueString, how can i fix?
11-04EnterpriseXSS vulnerability despite encoding
10-29MobileHow to sanitize html in angular for avoiding XSS vulnerabilities
10-22Software designHow to validate Markdown Code to prevent XSS attacks?
09-24OSXSS: How can I remove JS snippets from a String in C#?