diff --git a/OWASP test - Sloetjes.md b/OWASP test - Sloetjes.md index 53d9b68..5d99fd1 100644 --- a/OWASP test - Sloetjes.md +++ b/OWASP test - Sloetjes.md @@ -139,7 +139,8 @@ > In UTF-7, the left angle bracket (<) can be represented as "+ADw-". Note that this can contribute to XSS vulnerabilities if a web application's content-type can be changed or the charset is not specified and the browser interprets the charset as UTF-7. * List three things to look for in an input sanitizer to avoid XSS problems. -> * Input sanitizers should: +> Input sanitizers should: + > Be context-aware: Different contexts (like HTML, URLs, CSS, or JavaScript) have different rules about what characters are dangerous. > Encode or remove special characters: Characters like <, >, ", ', and & often need to be encoded depending on context.