2 ms·
> The other fix is properly escaping things before sticking them in your markup. Or simply not displaying user data using a markup language with built-in remot
by runeks 7y ago
> The other fix is properly escaping things before sticking them in your markup.
Or simply not displaying user data using a markup language with built-in remote code execution.
- bzbarsky 7y agoWell, yes, there are various levels of "thinking outside the box" here that could be applied.