Skip to content

happy family

Latest
Compare
Choose a tag to compare
@polinar68 polinar68 released this 12 Oct 20:11
· 14 commits to master since this release
ceb2f79
Rename sdk/docs/assets/js/main.js to sdk/docs/assets/js/ramos/main.js

Sanitizing untrusted input for HTML meta-characters is an important technique for preventing cross-site scripting attacks. But even a sanitized input can be dangerous to use if it is modified further before a browser treats it as HTML. A seemingly innocent transformation that expands a self-closing HTML tag from <div attr="{sanitized}"/> to <div attr="{sanitized}"></div> may in fact cause cross-site scripting vulnerabilities.