3 ms·
Isn't there xss in the first demo? What if title is user supplied and it's something like <script>alert("xss")</script>
by dvh 2y ago
Isn't there xss in the first demo? What if title is user supplied and it's something like <script>alert("xss")</script>
- _nhh 2y agoUser supplied stuff must always be sanitized :)