3 ms·
HTML5 Security Cheatsheet
- syaz1 16y agoHoly crap, that is indeed very useful.
- pornel 16y agoAlmost all of them can be prevented by escaping < and ".
- mhansen 16y agodon't forget ' & >
- IgorPartola 16y agoBut not all of these can: http://ha.ckers.org/xss.html http://ha.ckers.org/xss.html. This is an older, but much more complete list.
- devinj 16y agoWhat is this, a cheatsheet for creating an HTML5 blacklist? Why would you ever do such a thing?
- abyssknight 16y agoOr perhaps a [:white, :grey, :black].sort_by{rand}.first hat attack vector list? Penetration testers love this stuff, as do I. At my job, I educate developers by documenting things like this. It helps them be aware of what crazy stuff is out there.