Update page 'OWASP test - Sloetjes'

xuanyi.wang
2023-05-25 17:47:03 +02:00
parent e290934024
commit abd65e94ab
-2
@@ -140,8 +140,6 @@
* List three things to look for in an input sanitizer to avoid XSS problems. * List three things to look for in an input sanitizer to avoid XSS problems.
> * Input sanitizers should: > * Input sanitizers should:
> * Be context-aware: Different contexts (like HTML, URLs, CSS, or JavaScript) have different rules about what characters are dangerous. > * Be context-aware: Different contexts (like HTML, URLs, CSS, or JavaScript) have different rules about what characters are dangerous.
> * Encode or remove special characters: Characters like <, >, ", ', and & often need to be encoded depending on context. > * Encode or remove special characters: Characters like <, >, ", ', and & often need to be encoded depending on context.
> * Be regularly updated and maintained: New attack techniques are discovered regularly, and a good sanitizer library will keep up with these techniques. > * Be regularly updated and maintained: New attack techniques are discovered regularly, and a good sanitizer library will keep up with these techniques.