4 ms·
> Filter values based on filter types (supported are: email, striptags) Striptags is not a security tool, it is a presentation tool. > Output filtering on all
by Kudos 14y ago
> Filter values based on filter types (supported are: email, striptags)
Striptags is not a security tool, it is a presentation tool.
> Output filtering on all values (preventing XSS)
I'm still trying to figure out how you've implemented this.
- jarnix 14y agoHere is the escaping : https://github.com/enygma/shieldframework/blob/master/Shield/View.php https://github.com/enygma/shieldframework/blob/master/Shield... at this line : $value = htmlspecialchars($value);
- Kudos 14y agoThat could do with being mentioned in the README, a large part of the problem with PHP is developers not knowing what method to use to sanitise strings. After seeing striptags mentioned explicitly, I expected the worst.
- JohnHaugeland 14y agoHe used DES for session security. That's the worst.
- Kudos 14y agohttps://github.com/enygma/shieldframework/commit/44d9fc7e9814f18f184c19a7858f831d1f01962c https://github.com/enygma/shieldframework/commit/44d9fc7e981...