3 ms·
??? XSS has long been a solved problem. Security is definitely not an argument for using front end JS frameworks as they add attack vectors and complication t
by chrischattin 4y ago
???
XSS has long been a solved problem.
Security is definitely not an argument for using front end JS frameworks as they add attack vectors and complication to the stack.
- progrus 4y agoIs your solution something like “always remember to sanitize user-generated content”?
- dc-programmer 4y agoIt’s definitely not a solved problem. Most developers absolutely would not escape their outputs if left to their own devices
- shadowgovt 4y agoAssuming your entrypoints are typed, TypeScript makes it much harder to accidentally mishandle data of the wrong type and frameworks make it much harder to inadvertently change state at a distance in a way that was unintended. These are the two most common ways that undesired behaviors are introduced to JavaScript UIs.