Tagged Questions
6
votes
3answers
327 views
How safe is it to accept a pre-defined set of non-harmful HTML tags from a request?
One of the first things I learned as a web developer was to never ever accept any HTML from the client. (Perhaps only if I HTML encode it.)
I use a WYSIWYG editor (TinyMCE) that outputs HTML. So far I ...
1
vote
1answer
114 views
Why can't we have some AntiXss Literal html tag
Nowadays I am learning about web security, XSS, etc. As XSS basically targets a client-agent (web browser) by injecting some malicious code that is executed by the web browser as it was inserted by an ...
