Update page 'OWASP test - Sloetjes'

xuanyi.wang
2023-05-25 17:45:26 +02:00
parent 50b51cb3f1
commit 51c92fe6eb
+1 -1
@@ -139,7 +139,7 @@
> In UTF-7, the left angle bracket (<) can be represented as "+ADw-". Note that this can contribute to XSS vulnerabilities if a web application's content-type can be changed or the charset is not specified and the browser interprets the charset as UTF-7.
* List three things to look for in an input sanitizer to avoid XSS problems.
> Input sanitizers should:
> * Input sanitizers should:
> Be context-aware: Different contexts (like HTML, URLs, CSS, or JavaScript) have different rules about what characters are dangerous.
> Encode or remove special characters: Characters like <, >, ", ', and & often need to be encoded depending on context.