3 ms·

https://www.owasp.org/index.php/Abridged_XSS_Prevention_Cheat_Sheet#RULE_.231_-_HTML_Escape_Before_Inserting_Untrusted_Data_into_HTML_Element_Content https://ww

by mooism2 13y ago

https://www.owasp.org/index.php/Abridged_XSS_Prevention_Cheat_Sheet#RULE_.231_-_HTML_Escape_Before_Inserting_Untrusted_Data_into_HTML_Element_Content https://www.owasp.org/index.php/Abridged_XSS_Prevention_Chea... suggests escaping a forward slash “as it helps end an HTML entity”. I do not understand this rationale.