From 431e4e64fe11d05e2452e74c3230622493489cef Mon Sep 17 00:00:00 2001 From: "xuanyi.wang" Date: Thu, 25 May 2023 17:45:50 +0200 Subject: [PATCH] Update page 'OWASP test - Sloetjes' --- OWASP test - Sloetjes.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/OWASP test - Sloetjes.md b/OWASP test - Sloetjes.md index 53d9b68..5d99fd1 100644 --- a/OWASP test - Sloetjes.md +++ b/OWASP test - Sloetjes.md @@ -139,7 +139,8 @@ > In UTF-7, the left angle bracket (<) can be represented as "+ADw-". Note that this can contribute to XSS vulnerabilities if a web application's content-type can be changed or the charset is not specified and the browser interprets the charset as UTF-7. * List three things to look for in an input sanitizer to avoid XSS problems. -> * Input sanitizers should: +> Input sanitizers should: + > Be context-aware: Different contexts (like HTML, URLs, CSS, or JavaScript) have different rules about what characters are dangerous. > Encode or remove special characters: Characters like <, >, ", ', and & often need to be encoded depending on context.