+- Sinisterly (https://sinister.ly)
+-- Forum: Hacking (https://sinister.ly/Forum-Hacking)
+--- Forum: Website & Server Hacking (https://sinister.ly/Forum-Website-Server-Hacking)
+--- Thread: Tutorial XSS - Identification & Prevention (/Thread-Tutorial-XSS-Identification-Prevention)
Pages:
1
2
RE: XSS - Identification & Prevention - w00t - 12-13-2012
I'm not entirely sure I understood the question, but I'll swing at it.
What I'm saying is that all user input, be it from a text box, a get variable, or a post variable, should be completely sanitized before any other code is ran that uses the input.
RE: XSS - Identification & Prevention - Ultimatum - 12-14-2012
(12-13-2012, 11:46 PM)w00t Wrote: I'm not entirely sure I understood the question, but I'll swing at it.
What I'm saying is that all user input, be it from a text box, a get variable, or a post variable, should be completely sanitized before any other code is ran that uses the input.
Ahh, sorry, I took you the wrong way, but yes, that would be the best.