3 ms·
Your backend should be double-checking any escaping the frontend does. Otherwise you can throw your fancy anti-XSS on the frontend in the bin. Also CSP helps.
by zaarn 9y ago
Your backend should be double-checking any escaping the frontend does.
Otherwise you can throw your fancy anti-XSS on the frontend in the bin.
Also CSP helps.