Tutorial XSS - Identification & Prevention

w00t · 12-13-2012, 11:46 PM

I'm not entirely sure I understood the question, but I'll swing at it.

What I'm saying is that all user input, be it from a text box, a get variable, or a post variable, should be completely sanitized before any other code is ran that uses the input.

Ultimatum · 12-14-2012, 01:39 AM

(12-13-2012, 11:46 PM)w00t Wrote: I'm not entirely sure I understood the question, but I'll swing at it.

What I'm saying is that all user input, be it from a text box, a get variable, or a post variable, should be completely sanitized before any other code is ran that uses the input.

Ahh, sorry, I took you the wrong way, but yes, that would be the best.