Update page 'OWASP test - Sloetjes'
+3
-3
@@ -142,6 +142,6 @@
|
||||
> * Input sanitizers should:
|
||||
|
||||
|
||||
> Be context-aware: Different contexts (like HTML, URLs, CSS, or JavaScript) have different rules about what characters are dangerous.
|
||||
> Encode or remove special characters: Characters like <, >, ", ', and & often need to be encoded depending on context.
|
||||
> Be regularly updated and maintained: New attack techniques are discovered regularly, and a good sanitizer library will keep up with these techniques.
|
||||
> * Be context-aware: Different contexts (like HTML, URLs, CSS, or JavaScript) have different rules about what characters are dangerous.
|
||||
> * Encode or remove special characters: Characters like <, >, ", ', and & often need to be encoded depending on context.
|
||||
> * Be regularly updated and maintained: New attack techniques are discovered regularly, and a good sanitizer library will keep up with these techniques.
|
||||
Reference in New Issue
Block a user