2 ms·
> You should do both. You should really do all three: 1) Sanitize input on the server. 2) Use a CSP to prevent your browser from rendering any asset unless s
by Alex3917 7y ago
> You should do both.
You should really do all three:
1) Sanitize input on the server.
2) Use a CSP to prevent your browser from rendering any asset unless specifically whitelisted.
3) Use your front end framework to sanitize text being displayed.