4 ms·
This is only on the front end. If the backend filters html tags then XSS won't be a problem.
by debt 18y ago
This is only on the front end. If the backend filters html tags then XSS won't be a problem.
- adamc 18y agoFiltering tags is notoriously difficult, though, because of the variety of encodings possible. Maybe you meant "properly encodes output"? That's the typical solution.