Posted by Roman Ivanov on 12/08/05 01:21

Michael B Allen wrote:
> Can someone recommend a general method for avoiding / eliminating XSS
> vulnerbilities with PHP?

IMO, the best way to avoid XSS is to filter _output_.

My script:
http://nengine.korsengineering.com/files/src/misc/HtmlFilter.phps

• Next in forum: Re: [PHP] Non-trivial task of converting text to HTML
• Prev in forum: Re: [PHP] Non-trivial task of converting text to HTML
• Thread view: Re: Preventing Cross Site Scripting Vulnerbilities

[Reply to this message]