13 ms·
Not sure that's true. Out of the box ASP.NET has request validation enabled by default that screens out lots of opportunities for XSS https://www.owasp.org/inde
by lupin_sansei 10y ago
Not sure that's true. Out of the box ASP.NET has request validation enabled by default that screens out lots of opportunities for XSS https://www.owasp.org/index.php/ASP.NET_Request_Validation https://www.owasp.org/index.php/ASP.NET_Request_Validation PHP doesn't have that for example.
- girvo 10y ago> PHP doesn't have that for example. Bare PHP, sure, but pick basically any framework that any modern PHP-based web app is built on and then it does, no?
- emodendroket 10y agoSymfony certainly offers it.